Lucene search

K
cveOracleCVE-2016-3567
HistoryJul 21, 2016 - 10:14 a.m.

CVE-2016-3567

2016-07-2110:14:04
oracle
web.nvd.nist.gov
23
cve-2016-3567
primavera p6
oracle primavera
vulnerability
confidentiality
integrity
nvd

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5

Confidence

Low

EPSS

0.001

Percentile

40.3%

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web access.

Affected configurations

Nvd
Node
oracleprimavera_p6_enterprise_project_portfolio_managementMatch8.3
OR
oracleprimavera_p6_enterprise_project_portfolio_managementMatch8.4
OR
oracleprimavera_p6_enterprise_project_portfolio_managementMatch15.1
OR
oracleprimavera_p6_enterprise_project_portfolio_managementMatch15.2
OR
oracleprimavera_p6_enterprise_project_portfolio_managementMatch16.1
VendorProductVersionCPE
oracleprimavera_p6_enterprise_project_portfolio_management8.3cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.3:*:*:*:*:*:*:*
oracleprimavera_p6_enterprise_project_portfolio_management8.4cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:8.4:*:*:*:*:*:*:*
oracleprimavera_p6_enterprise_project_portfolio_management15.1cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.1:*:*:*:*:*:*:*
oracleprimavera_p6_enterprise_project_portfolio_management15.2cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:15.2:*:*:*:*:*:*:*
oracleprimavera_p6_enterprise_project_portfolio_management16.1cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:16.1:*:*:*:*:*:*:*

CVSS2

4.9

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

CVSS3

5.4

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

AI Score

5

Confidence

Low

EPSS

0.001

Percentile

40.3%

Related for CVE-2016-3567