← All advisories

Critical severity9.8NVD Advisory· Published Feb 17, 2022· Updated Jul 9, 2026

CVE-2022-22916

CVE-2022-22916

Description

O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Zoneland/O2oa
cpe:2.3:a:zoneland:o2oa:6.4.7:*:*:*:*:*:*:*
O2oa/O2oacpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =6.4.7

Patches

Vulnerability mechanics

References

1

github.com/wendell1224/O2OA-POC/blob/main/POC.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.