TeleMessage 3

Organization

CVE-2025-48927: Tele Message TM SGNL Initialization of a Resource with an Insecure Default Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Jul 01, 2025

TeleMessage TM SGNL contains an initialization of a resource with an insecure default vulnerability. This vulnerability relies on how the Spring Boot Actuator is configured with an exposed heap dump endpoint at a /heapdump URI.

Vulnerabilities & Patching

CVE-2025-48928: Tele Message TM SGNL Exposure of Core Dump File to an Unauthorized Control Sphere Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog Jul 01, 2025

TeleMessage TM SGNL contains an exposure of core dump file to an unauthorized control sphere Vulnerability. This vulnerability is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously...

Vulnerabilities & Patching

CVE-2025-47729: Tele Message TM SGNL Hidden Functionality Vulnerability

Known Exploited Vulnerabilities CISA KEV Catalog May 12, 2025

TeleMessage TM SGNL contains a hidden functionality vulnerability in which the archiving backend holds cleartext copies of messages from TM SGNL application users.

Vulnerabilities & Patching