CVE-2025-15503 Scanner
CVE-2025-15503 Scanner - Arbitrary File Upload vulnerability in Sangfor OSM
Used 2.6k times · 3.4k assets checked · domain, subdomain, ipv4
CVE
CVE-2025-15503
5.5
CVSSmedium
Exploitable remotely over the internet · no authentication required.
Description
A security flaw has been discovered in Sangfor Operation and Maintenance Management System up to 3.0.8. The impacted element is an unknown function of the file /fort/trust/version/common/common.jsp. Performing a manipulation of the argument File results in unrestricted upload. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
Attack Vector
Network
Privileges Req.
None
User Interaction
None
operation and maintenance management system
Updated Sep 26, 2026View on NVD →
S4E scanner
CVE history: operation and maintenance management system
Predict next CVE date with AIMonitor this CVE on your assets
S4E maps published CVEs to scanners and forecasts the next disclosure window for your stack.
Create a free account →