VulnSocial

CVE-2025-15503Disclosure(sangfor / operation_and_maintenance_security_management_system)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security flaw has been discovered in Sangfor Operation and Maintenance Management System up to 3.0.8. The impacted element is an unknown function of the file /fort/trust/version/common/common.jsp. Performing a manipulation of the argument File results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

sangfor CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-284CWE-434

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • operation_and_maintenance_security_management_system

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Vendors
sangfor
Products
operation_and_maintenance_security_management_system

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-06-07: 1Technical Details · 2026-06-07: 106-07
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
By indicator
Full discourse1 post
  • pdnuclei-bot@pdnuclei_bot
    Disclosure

    🚨 CVE-2025-15503 - critical 🚨 Sangfor OSM - Arbitrary File Upload > Sangfor Operation and Maintenance Management System <= 3.0.8 contains an unrestricted... 👾 https://cloud.projectdiscovery.io/library/CVE-2025-15503 @pdnuclei #NucleiTemplates #cve

    Post summary

    CVE-2025-15503 is a critical arbitrary file upload vulnerability affecting Sangfor Operation and Maintenance Management System versions up to 3.0.8, announced with minimal details and no mentioned patch, exploit, or active exploitation.

    0001286
    952 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appsangforoperation_and_maintenance_security_management_system---

Explore more

Back to dashboardsangfor CVEsoperation_and_maintenance_security_management_system vulnerabilities