CVE-2015-7912

CRITICAL 10.0CVE-2015-7912 · Published 21/11/2015 · updated 17/06/2026

In short

CVE-2015-7912 is a CRITICAL (CVSS 10.0) vulnerability affecting aggregate (tibbo).
Chance of exploitation in the next 30 days (EPSS): 3.2%, higher than 88.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
aggregate tibbo	`≤ 5.21.02`	No fix yet

Description

The Ice Faces servlet in ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to upload and execute arbitrary Java code via a crafted XML document.

References

zerodayinitiative.com/advisories/ZDI-15-571
ics-cert.us-cert.gov/advisories/ICSA-15-323-01 · Patch

More vulnerabilities in aggregate

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free