/Vulnerability Library

Sangfor OSM - Arbitrary File Upload

CVE-2025-15503
Verified

Description

Sangfor Operation and Maintenance Management System <= 3.0.8 contains an unrestricted file upload vulnerability caused by manipulation of the \"File\" argument in /fort/trust/version/common/common.jsp, letting remote attackers upload arbitrary files, exploit requires no special privileges.

Severity

Critical

Exploit Probability

2%

Published Date

February 11, 2026

Template Author

ark

CVE-2025-15503.yaml
9.5Severity

CVSS Metrics

CVE ID:
cve-2025-15503
CWE ID:
cwe-434

References

https://nvd.nist.gov/vuln/detail/CVE-2025-15503https://github.com/advisories/GHSA-h49h-jpp7-xv85

Remediation Steps

Update to the latest version.