What’s Vulnerable › Vulnerabilities

CVE-2015-7912

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-11-21 · updated 2026-06-17

Description

The Ice Faces servlet in ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to upload and execute arbitrary Java code via a crafted XML document.

Affected products

• Tibbo Aggregate: through 5.21.02

References

• http://zerodayinitiative.com/advisories/ZDI-15-571/
• https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01
• http://zerodayinitiative.com/advisories/ZDI-15-571/
• https://ics-cert.us-cert.gov/advisories/ICSA-15-323-01

Get alerted when CVE-2015-7912 or the next vulnerability affects your stack