CVE-2015-7913

Published: Nov 21, 2015Modified: May 6, 2026

7.2

Vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 3.9 / Impact: 10.0

Source: NVD

Description

ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows local users to execute arbitrary Java code with SYSTEM privileges by using the Apache Axis AdminService deployment method to publish a class.

Affected (1)

Products: Tibbo: Aggregate

Tibbo

1 product

Aggregate

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Tibbo Aggregate	version ≤ 5.21.02

References (4)

http://zerodayinitiative.com/advisories/ZDI-15-572/

Source: ics-cert@hq.dhs.gov

https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01

Source: ics-cert@hq.dhs.gov

PatchUS Government Resource

http://zerodayinitiative.com/advisories/ZDI-15-572/

Source: af854a3a-2127-422b-91ae-364da2661108

https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01

Source: af854a3a-2127-422b-91ae-364da2661108

PatchUS Government Resource

Timeline

No history available yet.