Lucene search

[email protected]CVE-2016-3567

HistoryJul 21, 2016 - 10:14 a.m.

CVE-2016-3567

2016-07-2110:14:04

[email protected]

web.nvd.nist.gov

cve-2016-3567

primavera p6

oracle primavera

vulnerability

confidentiality

integrity

nvd

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5 Medium

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

40.2%

JSON

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web access.

Affected configurations

NVD

Node

oracleprimavera_p6_enterprise_project_portfolio_managementMatch8.3

oracleprimavera_p6_enterprise_project_portfolio_managementMatch8.4

oracleprimavera_p6_enterprise_project_portfolio_managementMatch15.1

oracleprimavera_p6_enterprise_project_portfolio_managementMatch15.2

oracleprimavera_p6_enterprise_project_portfolio_managementMatch16.1

CPENameOperatorVersion
oracle:primavera_p6_enterprise_project_portfolio_managementoracle primavera p6 enterprise project portfolio managementeq8.3
oracle:primavera_p6_enterprise_project_portfolio_managementoracle primavera p6 enterprise project portfolio managementeq8.4
oracle:primavera_p6_enterprise_project_portfolio_managementoracle primavera p6 enterprise project portfolio managementeq15.1
oracle:primavera_p6_enterprise_project_portfolio_managementoracle primavera p6 enterprise project portfolio managementeq15.2
oracle:primavera_p6_enterprise_project_portfolio_managementoracle primavera p6 enterprise project portfolio managementeq16.1

CPE	Name	Operator	Version
oracle:primavera_p6_enterprise_project_portfolio_management	oracle primavera p6 enterprise project portfolio management	eq	8.3
oracle:primavera_p6_enterprise_project_portfolio_management	oracle primavera p6 enterprise project portfolio management	eq	8.4
oracle:primavera_p6_enterprise_project_portfolio_management	oracle primavera p6 enterprise project portfolio management	eq	15.1
oracle:primavera_p6_enterprise_project_portfolio_management	oracle primavera p6 enterprise project portfolio management	eq	15.2
oracle:primavera_p6_enterprise_project_portfolio_management	oracle primavera p6 enterprise project portfolio management	eq	16.1

References

www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

www.securityfocus.com/bid/91787

www.securityfocus.com/bid/91862

www.securitytracker.com/id/1036393

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

5 Medium

AI Score

Confidence

Low

4.9 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:S/C:P/I:P/A:N

0.001 Low

EPSS

Percentile

40.2%

JSON

Related for CVE-2016-3567

prion1 nvd1 cvelist1 oracle1