CWE-528 · 2 records
Exposure of Core Dump File to an Unauthorized Control Sphere
CVEs in this class
2 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
46Plan | CVE-2025-48928Weaponized | The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" insmarsh · telemessage · CWE-528 | Medium4.0 | KEV | 0.6% | May 28, 2025 |
23Monitor | CVE-2024-10403No exploit | SFTP/FTP password could be captured in plain text in Supportsave generated from SANnavbroadcom · fabric operating system · CWE-528 | Medium5.9 | — | 0.7% | Nov 21, 2024 |
- CVE-2025-4892846Plan
The TeleMessage service through 2025-05-05 is based on a JSP application in which the heap content is roughly equivalent to a "core dump" in
MediumCVSS 4.0KEVWeaponizedEPSS 1%smarsh · telemessageMay 28, 2025
- CVE-2024-1040323Monitor
SFTP/FTP password could be captured in plain text in Supportsave generated from SANnav
MediumCVSS 5.9No exploitEPSS 1%broadcom · fabric operating systemNov 21, 2024