Vulnerability in Tibbo Aggregate
CVE-2015-7912
The Ice Faces servlet in ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to upload and execute arbitrary Java code via a crafted XML document.
EPSS: 0.032 (86.8th percentile) — read the EPSS interpretation.
Affected products
- Tibbo Aggregate
- N/a — versions n/a
References
- ics-cert@hq.dhs.gov (x_refsource_MISC)
- ics-cert@hq.dhs.gov (US Government Resource, Patch, x_refsource_MISC)