NVD disclosure day

Published threat advisories for February 17, 2022

CVE-2022-22916

O2OA RCE Vulnerability in Jaxrs Invoke Endpoint.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

O2OA, a web-based enterprise application platform, has a critical remote code execution vulnerability in its `/x_program_center/jaxrs/invoke` endpoint. This allows unauthenticated attackers to run arbitrary commands on a reachable server, potentially compromising systems and sensitive data. Confirming O2OA usage and ex

NVD modified: NVD date unavailable

CVE advisoryKnown Exploit

CVE-2021-45382

D-Link Router Remote Command Execution Vulnerability.

Halo Surface Signal: 5 out of 5 — more likely to be public-facing.

A vulnerability in certain D-Link routers' DDNS function allows for remote command execution. This exposes organizations to risks of unauthorized device control and potential data breaches. Affected router models are past their end-of-life and will not be patched, increasing business risk.

NVD modified: NVD date unavailable • CISA KEV