CVE-2020-14946: Globalradar Bsa Radar

Medium severity, CVSS 4.3. EPSS: 7.7% chance of exploitation in the next 30 days.

downloadFile.ashx in the Administrator section of the Surveillance module in Global RADAR BSA Radar 1.6.7234.24750 and earlier allows users to download transaction files. When downloading the files, a user is able to view local files on the web server by manipulating the FileName and FilePath parameters in the URL, or while using a proxy. This vulnerability could be used to view local sensitive files or configuration files.

Affected products

• Globalradar Bsa Radar: up to and including 1.6.7234.24750

Published 2020-06-22. Last modified 2026-06-17.