CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It may be remotely exploitable.
CVE
CVE-2019-9540
Severity
MEDIUM
CVSS
6.1
EPSS
0.84%
Original NVD Description
: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in prefs.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5.
Related CVEs
Other vulnerabilities affecting the same vendor(s)