CVE-2022-29937

PoC —

CVSS 3.1

8.8 high

EPSS

2%p73

Published

Apr 29, 2022 (Apr 29, 2022)

Modified

Jun 17, 2026

Description

USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to achieve agent root access because some common OS commands are blocked but (for example) an OS command for base64 decoding is not blocked. NOTE: this is not an Oracle Corporation product.

Vendors: usu
Products: oracle optimization
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.