CVE-2022-29934: Usu Oracle Optimization

High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days.

USU Oracle Optimization before 5.17.5 lacks Polkit authentication, which allows smartcollector users to achieve root access via pkexec. NOTE: this is not an Oracle Corporation product.

Affected products

• Usu Oracle Optimization: version 5.16.2 only

Published 2022-04-29. Last modified 2026-06-17.