CVE-2015-7912

EUVD-2015-7810
The Ice Faces servlet in ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to upload and execute arbitrary Java code via a crafted XML document.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
10 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 63%
Affected Products (NVD)
VendorProductVersion
tibboaggregate
𝑥
≤ 5.21.02
𝑥
= Vulnerable software versions
References
http://zerodayinitiative.com/advisories/ZDI-15-571/
https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01
http://zerodayinitiative.com/advisories/ZDI-15-571/
https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01