Export limit exceeded: 14426 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2022-29937

USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to achieve agent root access because some common OS commands are blocked but (for example) an OS command for base64 decoding is not blocked. NOTE: this is not an Oracle Corporation product.

CVSS 3.1 · 8.8 High EPSS 1.5% KEV · Not listed
Vendors
Usu
Products
Oracle Optimization
CVE-2022-29936

USU Oracle Optimization before 5.17 allows authenticated quantum users to achieve remote code execution because of /v2/quantum/save-data-upload-big-file Java deserialization. NOTE: this is not an Oracle Corporation product.

CVSS 3.1 · 8.8 High EPSS 2.2% KEV · Not listed
Vendors
Usu
Products
Oracle Optimization
CVE-2022-29935

USU Oracle Optimization before 5.17.5 allows attackers to discover the quantum credentials via an agent-installer download. NOTE: this is not an Oracle Corporation product.

CVSS 3.1 · 7.5 High EPSS 1.1% KEV · Not listed
Vendors
Usu
Products
Oracle Optimization
CVE-2022-29934

USU Oracle Optimization before 5.17.5 lacks Polkit authentication, which allows smartcollector users to achieve root access via pkexec. NOTE: this is not an Oracle Corporation product.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Usu
Products
Oracle Optimization