CVE-2015-7912 The Ice Faces servlet in ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to upload and execute arbitrary Java code via a crafted XML doc...
HighCVSS 10.0
EPSS 3.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Ice Faces servlet in ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to upload and execute arbitrary Java code via a crafted XML document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| tibbo aggregate | <= 5.21.02 | No fix listed |
References
- zerodayinitiative.com
- ics-cert.us-cert.gov patch us-government-resource