CVE-2022-22916

Critical · 9.8

CVSS

9.8

EPSS

38.7%

Published

Feb 17, 2022

CISA due date

—

The record

O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.

Ecosystem	Package	Introduced	Fixed