CVE-2022-29937

8.8 highEPSS 1.5%

High (8.8) in usu oracle optimization. EPSS 1.5% chance of exploitation in the next 30 days.

USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to achieve agent root access because some common OS commands are blocked but (for example) an OS command for base64 decoding is not blocked. NOTE: this is not an Oracle Corporation product.

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 74% of CVEs (scores of 2026-10-31)
CWE: CWE-78
Published: 2022-04-29
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

usu:oracle_optimization

References

https://github.com/orangecertcc/security-research/security/advisories/GHSA-xw3r-mq8p-fjv5
https://github.com/orangecertcc/security-research/security/advisories/GHSA-xw3r-mq8p-fjv5

Check your stack JSON