PT-2022-15733

Name of the Vulnerable Software and Affected Versions O2OA version 6.4.7 Description A remote code execution RCE issue was discovered in O2OA via the "/x program center/jaxrs/invoke" API endpoint. Recommendations For O2OA version 6.4.7, consider restricting access to the "/x program...