Vulnerabilities

CVE-2022-22916 | BDVDB-2026-170237 Detail

Description#

O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/wendell1224/O2OA-POC/blob/main/POC.md

Exploit#

No public exploit known

History#

Version 12022-02-17Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.