CVE-2022-29936: Usu Oracle Optimization

High severity, CVSS 8.8. EPSS: 2.2% chance of exploitation in the next 30 days.

USU Oracle Optimization before 5.17 allows authenticated quantum users to achieve remote code execution because of /v2/quantum/save-data-upload-big-file Java deserialization. NOTE: this is not an Oracle Corporation product.

Affected products

• Usu Oracle Optimization: version 5.16.2 only

Published 2022-04-29. Last modified 2026-06-17.