Lucene search

[email protected]CVE-2016-3572

HistoryJul 21, 2016 - 10:14 a.m.

CVE-2016-3572

2016-07-2110:14:10

[email protected]

web.nvd.nist.gov

cve-2016-3572

unspecified vulnerability

primavera p6

project portfolio management

oracle

remote authenticated users

confidentiality

integrity

web access

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

6.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.9%

JSON

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Access.

Affected configurations

NVD

Node

oracleprimavera_p6_enterprise_project_portfolio_managementMatch8.3

oracleprimavera_p6_enterprise_project_portfolio_managementMatch8.4

oracleprimavera_p6_enterprise_project_portfolio_managementMatch15.1

oracleprimavera_p6_enterprise_project_portfolio_managementMatch15.2

oracleprimavera_p6_enterprise_project_portfolio_managementMatch16.1

CPENameOperatorVersion
oracle:primavera_p6_enterprise_project_portfolio_managementoracle primavera p6 enterprise project portfolio managementeq8.3
oracle:primavera_p6_enterprise_project_portfolio_managementoracle primavera p6 enterprise project portfolio managementeq8.4
oracle:primavera_p6_enterprise_project_portfolio_managementoracle primavera p6 enterprise project portfolio managementeq15.1
oracle:primavera_p6_enterprise_project_portfolio_managementoracle primavera p6 enterprise project portfolio managementeq15.2
oracle:primavera_p6_enterprise_project_portfolio_managementoracle primavera p6 enterprise project portfolio managementeq16.1

CPE	Name	Operator	Version
oracle:primavera_p6_enterprise_project_portfolio_management	oracle primavera p6 enterprise project portfolio management	eq	8.3
oracle:primavera_p6_enterprise_project_portfolio_management	oracle primavera p6 enterprise project portfolio management	eq	8.4
oracle:primavera_p6_enterprise_project_portfolio_management	oracle primavera p6 enterprise project portfolio management	eq	15.1
oracle:primavera_p6_enterprise_project_portfolio_management	oracle primavera p6 enterprise project portfolio management	eq	15.2
oracle:primavera_p6_enterprise_project_portfolio_management	oracle primavera p6 enterprise project portfolio management	eq	16.1

References

www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

www.securityfocus.com/bid/91787

www.securityfocus.com/bid/91855

www.securitytracker.com/id/1036393

5.5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

6.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

41.9%

JSON

Related for CVE-2016-3572

cvelist1 nvd1 prion1 oracle1