Oracle Primavera P6 Enterprise Project Portfolio Management (August 2026 CSPU)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(338746);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/08/21");

  script_cve_id(
    "CVE-2025-15599",
    "CVE-2026-0540",
    "CVE-2026-41238",
    "CVE-2026-41239",
    "CVE-2026-41240"
  );

  script_name(english:"Oracle Primavera P6 Enterprise Project Portfolio Management (August 2026 CSPU)");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is affected by a vulnerability.");
  script_set_attribute(attribute:"description", value:
"The version of Primavera P6 Enterprise Project Portfolio Management installed on the remote host is affected by a
vulnerability as referenced in the August 2026 CSPU advisory.

  - Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction
    and Engineering (component: Web Access (DOMPurify)). Supported versions that are affected are
    21.12.0.0-21.12.21.8, 22.12.0.0-22.12.21.3, 23.12.0.0-23.12.19.0, 24.12.0.0-24.12.15.0 and
    25.12.0.0-25.12.6.0. Easily exploitable vulnerability allows unauthenticated attacker with network
    access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks
    require human interaction from a person other than the attacker and while the vulnerability is in
    Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional
    products (scope change). Successful attacks of this vulnerability can result in unauthorized access to
    critical data or complete access to all Primavera P6 Enterprise Project Portfolio Management accessible
    data as well as unauthorized update, insert or delete access to some of Primavera P6 Enterprise Project
    Portfolio Management accessible data. (CVE-2026-41240)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://www.oracle.com/docs/tech/security-alerts/cspuaug2026csaf.json");
  script_set_attribute(attribute:"see_also", value:"https://www.oracle.com/security-alerts/cspuaug2026.html");
  script_set_attribute(attribute:"solution", value:
"Apply the appropriate patch according to the August 2026 Oracle Critical Security Patch Update advisory.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:N");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:N");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-41240");

  script_set_attribute(attribute:"vuln_publication_date", value:"2026/08/13");
  script_set_attribute(attribute:"patch_publication_date", value:"2026/08/13");
  script_set_attribute(attribute:"plugin_publication_date", value:"2026/08/21");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:oracle:primavera_p6_enterprise_project_portfolio_management");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"CGI abuses");

  script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("oracle_primavera_p6_eppm.nbin");
  script_require_keys("installed_sw/Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM)");
  script_require_ports("Services/www", 8004);

  exit(0);
}

include('vcf.inc');
include('http.inc');

get_install_count(app_name:'Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM)', exit_if_zero:TRUE);

var port = get_http_port(default:8004);

var app_info = vcf::get_app_info(app:'Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM)', port:port);

var constraints = [
  { 'min_version' : '21.12.0.0', 'fixed_version' : '21.12.21.9' },
  { 'min_version' : '22.12.0.0', 'fixed_version' : '22.12.21.4' },
  { 'min_version' : '23.12.0.0', 'fixed_version' : '23.12.20.0' },
  { 'min_version' : '24.12.0.0', 'fixed_version' : '24.12.16.0' },
  { 'min_version' : '25.12.0.0', 'fixed_version' : '25.12.7.0' }
];

vcf::check_version_and_report(
    app_info:app_info,
    constraints:constraints,
    severity:SECURITY_HOLE
);