CVE-2025-59744: Andsoft E-Tms

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

Path traversal vulnerability in AndSoft's e-TMS v25.03. This vulnerability allows an attacker to access files only within the web root using the “docurl” parameter in “/lib/asp/DOCSAVEASASP.ASP”.

Affected products

• Andsoft E-Tms: version 25.03 only

Published 2025-10-02. Last modified 2026-06-17.