Tmsglobalsoft vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Tmsglobalsoft products: 1 record(s), with severity, exploitation and fixes.

Tms Management Console 1

Exploited only (KEV) →

CVE-2025-69612 Medium · 6.5 CWE-22 Jan 22, 2026

Path Traversal in Tmsglobalsoft Tms Management Console

A path traversal vulnerability exists in TMS Management Console (version 6.3.7.27386.20250818) from TMS Global Software. The "Download Template" function in the profile dashboard does not neutralize directory traversal sequences (../) in the filePath parameter, allowing authenticated users to read arbitrary files, such as the server's Web.config.