Usu Oracle Optimization — known CVE vulnerabilities

Every CVE whose affected-product data names Usu Oracle Optimization, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-29936 — CVSS 8.8 (high): USU Oracle Optimization before 5.17 allows authenticated quantum users to achieve remote code execution because of /v2/quantum/save-data-upl…
• CVE-2022-29937 — CVSS 8.8 (high): USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to achieve agent root access because some common OS…
• CVE-2022-29934 — CVSS 7.8 (high): USU Oracle Optimization before 5.17.5 lacks Polkit authentication, which allows smartcollector users to achieve root access via pkexec…
• CVE-2022-29935 — CVSS 7.5 (high): USU Oracle Optimization before 5.17.5 allows attackers to discover the quantum credentials via an agent-installer download. NOTE: this is…