CVE-2022-38118: Hgiga Oaklouds Portal

High severity, CVSS 8.8. EPSS: 1.7% chance of exploitation in the next 30 days.

OAKlouds Portal website’s Meeting Room has insufficient validation for user input. A remote attacker with general user privilege can perform SQL-injection to access, modify, delete database, perform system operations and disrupt service.

Affected products

• Hgiga Oaklouds Portal: from 2.0, up to and including 2.0-163; from 3.0, up to and including 3.0-163

Published 2022-08-30. Last modified 2026-06-17.