Lucene search

OracleCVE-2013-2411

HistoryApr 17, 2013 - 5:55 p.m.

CVE-2013-2411

2013-04-1717:55:07

oracle

web.nvd.nist.gov

cve-2013-2411

primavera p6

enterprise project portfolio management

oracle

vulnerability

remote attack

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

Low

EPSS

0.001

Percentile

50.0%

JSON

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 7.0, 8.1, and 8.2 allows remote attackers to affect integrity via unknown vectors related to Web Access.

Affected configurations

Nvd

Node

oracleprimavera_products_suiteMatch7.0

oracleprimavera_products_suiteMatch8.1

oracleprimavera_products_suiteMatch8.2

VendorProductVersionCPE
oracleprimavera_products_suite7.0cpe:2.3:a:oracle:primavera_products_suite:7.0:*:*:*:*:*:*:*
oracleprimavera_products_suite8.1cpe:2.3:a:oracle:primavera_products_suite:8.1:*:*:*:*:*:*:*
oracleprimavera_products_suite8.2cpe:2.3:a:oracle:primavera_products_suite:8.2:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	primavera_products_suite	7.0	cpe:2.3:a:oracle:primavera_products_suite:7.0:::::::*
oracle	primavera_products_suite	8.1	cpe:2.3:a:oracle:primavera_products_suite:8.1:::::::*
oracle	primavera_products_suite	8.2	cpe:2.3:a:oracle:primavera_products_suite:8.2:::::::*

References

www.mandriva.com/security/advisories?name=MDVSA-2013:150

www.oracle.com/technetwork/topics/security/cpuapr2013-1899555.html

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

Confidence

Low

EPSS

0.001

Percentile

50.0%

JSON

Related for CVE-2013-2411