Operation And Maintenance Management System

2 CVEs product

Monthly

CVE-2025-15500 CRITICAL POC Act Now

Sangfor Operation and Maintenance Management System (through 3.0.8) has OS command injection in /isomp-protocol/protocol/getHis via the sessionPath parameter. Public exploit available, vendor unresponsive.

Command Injection Operation And Maintenance Management System
NVD GitHub VulDB
CVSS 3.1
9.8
EPSS
0.3%
CVE-2025-15499 HIGH POC This Week

Operation And Maintenance Management System versions up to 3.0.8. is affected by command injection (CVSS 8.8).

Java Command Injection Operation And Maintenance Management System
NVD GitHub VulDB
CVSS 3.1
8.8
EPSS
0.4%
CVE-2025-15500
EPSS 0% CVSS 9.8
CRITICAL POC Act Now

Sangfor Operation and Maintenance Management System (through 3.0.8) has OS command injection in /isomp-protocol/protocol/getHis via the sessionPath parameter. Public exploit available, vendor unresponsive.

Command Injection Operation And Maintenance Management System
NVD GitHub VulDB
CVE-2025-15499
EPSS 0% CVSS 8.8
HIGH POC This Week

Operation And Maintenance Management System versions up to 3.0.8. is affected by command injection (CVSS 8.8).

Java Command Injection Operation And Maintenance Management System
NVD GitHub VulDB

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy