CVE-2015-7912: The Ice Faces servlet in ag_server_service.exe in the AggreGate Server Service in Tibbo AggreGate before 5....

Security readout for executives and security teams

This vulnerability lets a remote attacker upload and run Java code against vulnerable Tibbo AggreGate Server Service systems. In business terms, a reachable affected server could become attacker-controlled. The bundle does not provide CVSS scoring, CPEs, or evidence of active exploitation. Exposure is likely limited to organizations running Tibbo AggreGate Server Service before 5.30.06 where the Ice Faces servlet is reachable over a network. Asset matching needs product/version verification because the source bundle lacks CPEs. Prioritize remediation for any reachable affected AggreGate server, especially in operational technology environments. Remote code execution on a management or automation platform can create high business impact even without confirmed active exploitation. Mitigation focus: Upgrade Tibbo AggreGate Server Service to version 5.30.06 or later.; Check Tibbo and ICS-CERT guidance for any version-specific remediation instructions.; Restrict AggreGate service access to trusted administrative networks only..

Prepared

Jun 13, 2026, 21:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.