CVE-2025-48928 | TeleMessage Service up to 2025-05-05 JSP Application exposure of core dump file to an unauthorized control sphere

A vulnerability was found in TeleMessage Service up to 2025-05-05. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component JSP Application. The manipulation leads to exposure of core dump file to an unauthorized control sphere.

This vulnerability is known as CVE-2025-48928. Attacking locally is a requirement. Furthermore, there is an exploit available.

This product is available as a managed service. Users are not able to maintain vulnerability countermeasures themselves.