CVE-2025-48928

MEDIUM Year: 2025
CVSS v3 Score
4.0
Medium
Weakness Type
CWE-528
View all →

Vulnerability Description

The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump, as exploited in the wild in May 2025.

Related Vulnerabilities

CVE-2024-10403

MEDIUM
CVSS:7.5(High)

Brocade Fabric OS versions before 8.2.3e2, versions 9.0.0 through 9.2.0c, and 9.2.1 through 9.2.1a can capture the SFTP/FTP server password used for a firmware download operation initiated by SANnav o...

CWE-5282024