CVE-2025-0202CWE-73

TCS BaNCS REPORTS_SHOW_FILE.jsp file inclusion

Medium · published January 4, 2025

CVSS v4.0
5.1
EPSS
0%
Percentile
24.1
In the wild
Unconfirmed
What it is

A vulnerability was found in TCS BaNCS 10. It has been classified as problematic. This affects an unknown part of the file /REPORTS/REPORTS_SHOW_FILE.jsp. The manipulation of the argument FilePath leads to file inclusion. The real existence of this vulnerability is still doubted at the moment.

The record
Technical detail
CVSS v4.0
5.1 · MEDIUM
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00323 · 24.1th percentile
Weakness
CWE-73 · External Control of File Name or Path
Published
2025-01-04T05:00Z
EPSS history
Timeline
  • 04 JAN 05:00Z
    TCS BaNCS REPORTS_SHOW_FILE.jsp file inclusion
    cvelistv5