Vulnerabilities

TI-2024-11775 CVE-2024-12700 · GHSA-q8x8-9m2h-346g

Tibbo AggreGate Network Manager Unrestricted Upload of File with Dangerous Type

MEDIUM 40

There is an unrestricted file upload vulnerability where it is possible for an authenticated user (low privileged) to upload an jsp shell and execute code with the privileges of user running the web server.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.00571 Published 2024-12-19 No fix listed CWE-434

TI-2015-06582 CVE-2015-7913 · GHSA-6927-h5gf-m7xx

ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06…

LOW 32

ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows local users to execute arbitrary Java code with SYSTEM privileges by using the Apache Axis AdminService deployment method to…

CVSS 2.0HIGH 7.2 Local No auth Interaction — EPSS 0.00402 Published 2015-11-21 No fix listed

TI-2015-06581 CVE-2015-7912 · GHSA-r7ww-qw67-8x94

The Ice Faces servlet in ag_server_service.exe in the AggreGate Server Service in Tibbo…

MEDIUM 49

The Ice Faces servlet in ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to upload and execute arbitrary Java code via a crafted XML document.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.03203 Published 2015-11-21 No fix listed

Vulnerabilities

Filters

Tibbo AggreGate Network Manager Unrestricted Upload of File with Dangerous Type

ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06…

The Ice Faces servlet in ag_server_service.exe in the AggreGate Server Service in Tibbo…