<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: automated message handling system</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2019-9542: : Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;) vulnerability in itemlo</title><link>https://patchthecve.com/cve/CVE-2019-9542.html</link><guid>https://patchthecve.com/cve/CVE-2019-9542.html</guid><pubDate>Wed, 17 Jun 2026 02:43:55 +0000</pubDate><description>MEDIUM 6.1: : Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;) vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System vers</description></item><item><title>CVE-2019-9541: : Information Exposure vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a rem</title><link>https://patchthecve.com/cve/CVE-2019-9541.html</link><guid>https://patchthecve.com/cve/CVE-2019-9541.html</guid><pubDate>Wed, 17 Jun 2026 02:43:55 +0000</pubDate><description>MEDIUM 6.1: : Information Exposure vulnerability in itemlookup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions prior to 4.1.5.5.</description></item><item><title>CVE-2019-9540: : Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;) vulnerability in prefs.</title><link>https://patchthecve.com/cve/CVE-2019-9540.html</link><guid>https://patchthecve.com/cve/CVE-2019-9540.html</guid><pubDate>Wed, 17 Jun 2026 02:43:55 +0000</pubDate><description>MEDIUM 6.1: : Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;) vulnerability in prefs.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System versions </description></item><item><title>CVE-2019-9539: : Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;) vulnerability in ModalW</title><link>https://patchthecve.com/cve/CVE-2019-9539.html</link><guid>https://patchthecve.com/cve/CVE-2019-9539.html</guid><pubDate>Wed, 17 Jun 2026 02:43:55 +0000</pubDate><description>MEDIUM 6.1: : Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;) vulnerability in ModalWindowPopup.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling Syste</description></item><item><title>CVE-2019-9538: : Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;) vulnerability in the LD</title><link>https://patchthecve.com/cve/CVE-2019-9538.html</link><guid>https://patchthecve.com/cve/CVE-2019-9538.html</guid><pubDate>Wed, 17 Jun 2026 02:43:54 +0000</pubDate><description>MEDIUM 6.1: : Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;) vulnerability in the LDAP cbURL parameter of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling S</description></item><item><title>CVE-2019-9537: : Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;) vulnerability in upload</title><link>https://patchthecve.com/cve/CVE-2019-9537.html</link><guid>https://patchthecve.com/cve/CVE-2019-9537.html</guid><pubDate>Wed, 17 Jun 2026 02:43:54 +0000</pubDate><description>MEDIUM 6.1: : Improper Neutralization of Input During Web Page Generation (&#x27;Cross-site Scripting&#x27;) vulnerability in uploaditem.asp of Telos Automated Message Handling System allows a remote attacker to inject arbitrary script into an AMHS session. This issue affects: Telos Automated Message Handling System vers</description></item></channel></rss>