4 matches found
CVE-2022-22916
O2OA v6.4.7 was discovered to contain a remote code execution RCE vulnerability via /xprogramcenter/jaxrs/invoke...
Remote code execution
O2OA v6.4.7 was discovered to contain a remote code execution RCE vulnerability via /xprogramcenter/jaxrs/invoke...
CVE-2022-22916
O2OA v6.4.7 was discovered to contain a remote code execution RCE vulnerability via /xprogramcenter/jaxrs/invoke...
CVE-2022-22916
O2OA v6.4.7 is affected by a remote code execution (RCE) vulnerability exposed via the endpoint /x_program_center/jaxrs/invoke. The RCE flaw, described across multiple sources (Red Hat, CVE records, OSV, etc.), stems from this JAX-RS invocation path and could allow a remote attacker to execute ar...