CVE-2015-7912: Tibbo Aggregate

High severity, CVSS 10.0. EPSS: 3.2% chance of exploitation in the next 30 days.

The Ice Faces servlet in ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5.30.06 allows remote attackers to upload and execute arbitrary Java code via a crafted XML document.

Affected products

• Tibbo Aggregate: up to and including 5.21.02

Published 2015-11-21. Last modified 2026-06-17.