What is GHSA-xh25-p8f3-4864?

GHSA-xh25-p8f3-4864 is a security advisory published by GitHub Security Advisories with Critical severity. O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via ...

Which CVE IDs does GHSA-xh25-p8f3-4864 cover?

GHSA-xh25-p8f3-4864 covers the following CVE IDs: CVE-2022-22916. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-xh25-p8f3-4864?

GHSA-xh25-p8f3-4864 has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-xh25-p8f3-4864CriticalCVSS 9.8

O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via ...

Vendor

GitHub Security Advisories

Published

February 18, 2022

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2022-22916 →

📋 Description

O2OA v6.4.7 was discovered to contain a remote code execution (RCE) vulnerability via /x_program_center/jaxrs/invoke.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2022-22916
https://github.com/wendell1224/O2OA-POC/blob/main/POC.md
http://o2oa.com
https://github.com/advisories/GHSA-xh25-p8f3-4864