CVE-2025-0202— TCS BaNCS REPORTS_SHOW_FILE.jsp file inclusion
Quick assessment
Affected
TCS BaNCS
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
TCS BaNCS（Tata Consultancy Services BaNCS）是TCS公司的一个核心银行软件套件。 TCS BaNCS 10版本存在安全漏洞，该漏洞源于对参数 FilePath 的错误操作会导致文件包含。
Possible ATT&CK Techniques 1 AI
T1195 · Supply Chain Compromise
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2025-0202
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
TCS BaNCS REPORTS_SHOW_FILE.jsp file inclusion
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in TCS BaNCS 10. It has been classified as problematic. This affects an unknown part of the file /REPORTS/REPORTS_SHOW_FILE.jsp. The manipulation of the argument FilePath leads to file inclusion. The real existence of this vulnerability is still doubted at the moment.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
文件名或路径的外部可控制
Source: CVE Program / CVE List V5
Vulnerability Title
TCS BaNCS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TCS BaNCS（Tata Consultancy Services BaNCS）是TCS公司的一个核心银行软件套件。 TCS BaNCS 10版本存在安全漏洞，该漏洞源于对参数 FilePath 的错误操作会导致文件包含。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-0202
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-0202
请登录查看更多情报信息。
Vendor Advisories for CVE-2025-0202 (2)
-
CVE-2025-0202 TCS BaNCS REPORTS_SHOW_FILE.jsp file inclusion [Disputed] vdb-entry technical-description
-
Submit #469455: TCS BaNCS Version 10 Local File Inclusion Vulnerability third-party-advisory
IV. Related Vulnerabilities
Same weakness: CWE-73
-
CVE-2026-77247
MCP Atlassian: Arbitrary server-local file upload to Jira/Co -
CVE-2026-83603
Netdata: Local Root via ndsudo Arbitrary socket_path → fail2 -
CVE-2026-65125
CVE-2026-65125 -
CVE-2026-54584
mport trusts environment-controlled temporary directories in -
CVE-2026-93987
rclone serve docker Path Traversal via Volume Name
V. Comments for CVE-2025-0202
No comments yet