Skip to content
Noroxi

usu records

4 published records for vendor usu.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

4 records
  • CVE-2022-29936
    36Monitor

    USU Oracle Optimization before 5.17 allows authenticated quantum users to achieve remote code execution because of /v2/quantum/save-data-upl

    HighCVSS 8.8No exploitEPSS 2%

    usu · oracle optimizationApr 29, 2022

  • CVE-2022-29937
    35Monitor

    USU Oracle Optimization before 5.17.5 allows authenticated DataCollection users to achieve agent root access because some common OS commands

    HighCVSS 8.8No exploitEPSS 2%

    usu · oracle optimizationApr 29, 2022

  • CVE-2022-29934
    31Monitor

    USU Oracle Optimization before 5.17.5 lacks Polkit authentication, which allows smartcollector users to achieve root access via pkexec.

    HighCVSS 7.8No exploitEPSS 0%

    usu · oracle optimizationApr 29, 2022

  • CVE-2022-29935
    30Monitor

    USU Oracle Optimization before 5.17.5 allows attackers to discover the quantum credentials via an agent-installer download.

    HighCVSS 7.5No exploitEPSS 1%

    usu · oracle optimizationApr 29, 2022