CVE-2015-7912

Published: Nov 21, 2015Modified: May 6, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

The Ice Faces servlet in ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to upload and execute arbitrary Java code via a crafted XML document.

Affected (1)

Products: Tibbo: Aggregate

Tibbo

1 product

Aggregate

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Tibbo Aggregate	version ≤ 5.21.02

References (4)

http://zerodayinitiative.com/advisories/ZDI-15-571/

Source: ics-cert@hq.dhs.gov

https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01

Source: ics-cert@hq.dhs.gov

PatchUS Government Resource

http://zerodayinitiative.com/advisories/ZDI-15-571/

Source: af854a3a-2127-422b-91ae-364da2661108

https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01

Source: af854a3a-2127-422b-91ae-364da2661108

PatchUS Government Resource

Timeline

No history available yet.