CVE & CISA-KEV Catalog

CVE-2025-48927

MEDIUMCISA KEVEPSS 94th pctl
5.3
CVSS v3
NVD

Description

The TeleMessage service through 2025-05-05 configures Spring Boot Actuator with an exposed heap dump endpoint at a /heapdump URI, as exploited in the wild in May 2025.

How to fix

Actively exploited, no published fix found yet

CISA required action: Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Federal remediation due: 2025-07-22

Mitigation guidance may be in the linked vendor advisories in the References section below.

TridentStack Control tracks known vulnerabilities across your Windows, macOS, and Linux fleet and shows the fix as soon as one is published. See how it works

CVSS v3 Vector

Exploitability

Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionNone
ScopeUnchanged

Impact

ConfidentialityLow
IntegrityNone
AvailabilityNone

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Exploit Intelligence

8.49%probability of exploitation in 30 days
94thpercentile

High risk: more likely to be exploited than 94% of all known CVEs.

Known Exploited Vulnerability (CISA KEV)

TeleMessage TM SGNL Initialization of a Resource with an Insecure Default Vulnerability

TeleMessage TM SGNL contains an initialization of a resource with an insecure default vulnerability. This vulnerability relies on how the Spring Boot Actuator is configured with an exposed heap dump endpoint at a /heapdump URI.

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Remediation due: 2025-07-22

References

Government Resource1
Press / Media1

Related Vulnerabilities

Other CWE-1188 vulnerabilities, ordered by exploit likelihood. View all

CVESeverityCVSSEPSSExploitedFix
CVE-2020-13927Critical9.8100%KEVFix
CVE-2023-27524High8.997%KEV-
CVE-2022-24706Critical9.893%KEVFix
CVE-2020-11532Critical9.877%-Fix
CVE-2018-16752High8.843%--
CVE-2020-14011Critical9.829%--
Embed a live status badge for CVE-2025-48927
CVE-2025-48927 severity badge

Markdown

[![CVE-2025-48927](https://tridentstack.com/cve/badge/CVE-2025-48927.svg)](https://tridentstack.com/cve/CVE-2025-48927)

HTML

<a href="https://tridentstack.com/cve/CVE-2025-48927"><img src="https://tridentstack.com/cve/badge/CVE-2025-48927.svg" alt="CVE-2025-48927"></a>

Find and fix vulnerabilities across your fleet

TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.

See how it worksStart freeThis CVE lookup is free and always will be.

This product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2025-11-05.