High severity8.8NVD Advisory· Published Apr 29, 2022· Updated Jun 17, 2026

CVE-2022-29937

Description

USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to achieve agent root access because some common OS commands are blocked but (for example) an OS command for base64 decoding is not blocked. NOTE: this is not an Oracle Corporation product.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

USU/Oracle Optimizationdescription
USU/Oracle Optimizationllm-fuzzy
Range: <5.17.5

Patches

Vulnerability mechanics

References

github.com/orangecertcc/security-research/security/advisories/GHSA-xw3r-mq8p-fjv5nvdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000