VULNERABILITY INTELLIGENCE

CVE-2015-7818

CVSS score7.2 HIGH
EPSS probability0.43%
CISA KEVNot currently listed
Published2015-11-12
Last modified2026-06-17
CVSS vectorAV:L/AC:L/Au:N/C:C/I:C/A:C

Description

The administration-panel web service in IBM System Networking Switch Center (SNSC) before 7.3.1.5 and Lenovo Switch Center before 8.1.2.0 allows local users to execute arbitrary JSP code with SYSTEM privileges by using the Apache Axis AdminService deployment method to install a .jsp file.

Primary references