Skip to main content
MEDIUM CISA KEV

CVE-2025-48928

CVSS v3

4

MEDIUM

EPSS Score

0.6 %

exploit probability, as of 2026-10-03

CISA KEV

Yes

known exploited

Exploitation

—

SSVC status

Description

The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump, as exploited in the wild in May 2025.

CISA Known Exploited Vulnerability

Date Added
2025-07-01
Patch Due Date
2025-07-22
Ransomware Use
Unknown

Technical details

Published
2025-05-28
Last Modified
2025-11-05

Frequently asked questions

What is CVE-2025-48928?

The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in which a password previously sent over HTTP would be included in this dump, as exploited in the wild in May 2025.

Is CVE-2025-48928 actively exploited?

Yes. CVE-2025-48928 is on the CISA Known Exploited Vulnerabilities (KEV) catalog, meaning it has been confirmed as actively exploited in the wild. CISA requires federal agencies to patch by 2025-07-22.

What is the CVSS score for CVE-2025-48928?

CVE-2025-48928 has a CVSS v3 base score of 4 (MEDIUM severity).

Is CVE-2025-48928 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

Check an IPSearch CVEsSIEM & TIP integrations

No credit card required · 50 free checks/month · Free API key

Go further

Other 2025 vulnerabilities worth triaging

Ranked by exploit probability (EPSS).

Back to CVE Database