CVE-2024-12700: Tibbo Aggregate Network Manager

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

There is an unrestricted file upload vulnerability where it is possible for an authenticated user (low privileged) to upload an jsp shell and execute code with the privileges of user running the web server.

Affected products

• Tibbo Aggregate Network Manager: up to and including 6.34.02

Published 2024-12-19. Last modified 2026-06-17.