CVE Wiki Pixee · CVE intelligence
← All CVEs

CVE-2022-22916

Critical · CVSS 9.8

O2OA — Remote Code Execution (RCE)

CVSS
9.8
nvd
EPSS
KEV
No
Class
oss containerizable
NVD-CWE-noinfo

Description

O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.

Search profile — drives PoC discovery

Symbols /x_program_center/jaxrs/invokex_program_centerjaxrsinvoke
Keywords CVE-2022-22916O2OARCEremote code executionO2OA v6.4.7x_program_centerjaxrs invokeO2OA POCwendell1224
Versions: v6.4.7

Ranked PoCs (28) — best first

Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.

Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.

References

Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T06:30:39.000Z