CVE-2025-0202
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Published Jan 4, 2025
Updated: Jan 22, 2025
CWE ID 73
Summary
CVE-2025-0202 is a recently identified vulnerability in TCS BaNCS 10. The issue lies within the /REPORTS/REPORTS_SHOW_FILE.jsp file, where the argument FilePath is susceptible to manipulation. If exploited, this vulnerability may lead to file inclusion. However, the authenticity of this vulnerability is currently under debate.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- BaNCS