CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2025-05-28
TeleMessage JSP Application Heap Dump Credential Exposure Vulnerability (CVE-2025-48928) Analysis and Mitigation Guide
[Affected Scope] TeleMessage services and associated JSP applications through 2025-05-05
[Impact] Local attackers can extract plaintext passwords and sensitive credentials previously transmitted over HTTP by analyzing memory heap dumps
[Mitigation] Apply the latest security patches, restrict access to heap dump files, and optimize JVM garbage collection to prevent sensitive data from persisting in memory