VULNERABILITY INTELLIGENCE

CVE-2015-7904

CVSS score6.5 MEDIUM

EPSS probability2.78%

CISA KEVNot currently listed

Published2015-10-28

Last modified2026-06-17

CVSS vectorAV:N/AC:L/Au:S/C:P/I:P/A:P

Description

Unrestricted file upload vulnerability in Infinite Automation Mango Automation 2.5.x and 2.6.x before 2.6.0 build 430 allows remote authenticated users to execute arbitrary JSP code via vectors involving an upload of an image file.

Primary references

ics-cert@hq.dhs.gov — Patch, Third Party Advisory, US Government Resource
af854a3a-2127-422b-91ae-364da2661108 — Patch, Third Party Advisory, US Government Resource