VulnerabilityAnalyzed
CVE-2025-10394
A vulnerability has been found in fcba_zzm ics-park Smart Park Management System 2.0.
LOW 2.0EPSS 0.43%
Does this matter?
Lower severity and a low EPSS score (0.43%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability has been found in fcba_zzm ics-park Smart Park Management System 2.0. Affected is an unknown function of the file ruoyi-quartz/src/main/java/com/ruoyi/quartz/controller/JobController.java of the component Scheduled Task Module. Such manipulation leads to code injection. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.
- CVSS 4.0
- 2.0 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.43% probability · 36th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-74, CWE-94
- Affected
- fcba zzm/smart park management system
- Source
- cna@vuldb.com
References
- https://github.com/Yyjccc/CVE/issues/1Exploit, Issue Tracking, Third Party Advisory
- https://vuldb.com/?ctiid.323829Permissions Required, VDB Entry
- https://vuldb.com/?id.323829Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.645729Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.