Vulnerability Details CVE-2022-22916
O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.901
EPSS Ranking 99.5%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2022-22916
-
cpe:2.3:a:zoneland:o2oa:6.4.7