Usu

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high4CVSS 7.0–8.9

Exploited now

Usu records in CISA KEV

No Usu vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Oracle Optimization 4 records MEDIUM

Records

4 records in Oracle Optimization · all components

TI-2022-12283 CVE-2022-29936 · GHSA-3mrf-6r8f-wh4j

USU Oracle Optimization before 5.17 allows authenticated quantum users to achieve remote…

MEDIUM 42

USU Oracle Optimization before 5.17 allows authenticated quantum users to achieve remote code execution because of /v2/quantum/save-data-upload-big-file Java deserialization.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.02207 Published 2022-04-29 No fix listed CWE-502

TI-2022-12284 CVE-2022-29937 · GHSA-6mqq-2gc9-7j3v

USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to…

MEDIUM 41

USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to achieve agent root access because some common OS commands are blocked but (for example) an OS command for base64 decoding is not blocked.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01524 Published 2022-04-29 No fix listed CWE-78

TI-2022-12282 CVE-2022-29935 · GHSA-g8mj-5558-mwh7

USU Oracle Optimization before 5.17.5 allows attackers to discover the quantum…

LOW 35

USU Oracle Optimization before 5.17.5 allows attackers to discover the quantum credentials via an agent-installer download.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01135 Published 2022-04-29 No fix listed

TI-2022-12281 CVE-2022-29934 · GHSA-3w87-5jwj-39vh

USU Oracle Optimization before 5.17.5 lacks Polkit authentication, which allows…

LOW 34

USU Oracle Optimization before 5.17.5 lacks Polkit authentication, which allows smartcollector users to achieve root access via pkexec.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00331 Published 2022-04-29 No fix listed CWE-306

Open these records in search →

Critical	0
High	4
Medium	0
Low	0
No CVSS	0