Lucene search
K

Oracle Primavera Unifier Unsupported Version Detection

🗓️ 18 Aug 2022 00:00:00Reported by TenableType 
nessus
 nessus
🔗 www.tenable.com👁 42 Views

Oracle Primavera Unifier Unsupported Version Detection. The remote host is running an unsupported version of an Oracle Primavera Unifier application, posing security vulnerabilities

Refs
Code
SourceLink
nessuswww.nessus.org/u
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(164274);
  script_version("1.5");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/03/27");

  script_name(english:"Oracle Primavera Unifier Unsupported Version Detection");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is running an unsupported version of an Oracle Primavera 
Unifier application.");
  script_set_attribute(attribute:"description", value:
"According to its version, the installation of Oracle Primavera 
Unifier application running on the remote host is no longer supported per:

- End Of Support Date or End Of Life Date for Primavera Unifier and 
  Its Enabling Software Environment (Doc ID
  2526166.1)

Lack of support implies that no new security patches for the product
will be released by the vendor. As a result, it is likely to contain
security vulnerabilities.");
# https://www.oracle.com/us/assets/lifetime-support-applications-069216.pdf 
  script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?fdef07ac");
  script_set_attribute(attribute:"solution", value:
"Upgrade to a version of Oracle Primavera that is currently supported.");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"manual");
  script_set_attribute(attribute:"cvss_score_rationale", value:"Tenable score for unsupported products.");

  script_set_attribute(attribute:"plugin_publication_date", value:"2022/08/18");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:oracle:primavera_unifier");
  script_set_attribute(attribute:"unsupported_by_vendor", value:"true");
  script_set_attribute(attribute:"thorough_tests", value:"true");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"CGI abuses");

  script_copyright(english:"This script is Copyright (C) 2022-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("oracle_primavera_unifier.nbin");
  script_require_keys("installed_sw/Oracle Primavera Unifier");

  exit(0);
}

include('vcf.inc');

var app = 'Oracle Primavera Unifier';

var app_info = vcf::combined_get_app_info(app:app);

vcf::check_granularity(app_info:app_info, sig_segments:2);

var now = get_kb_item("/tmp/start_time");
if (empty_or_null(now))
  now = int(gettimeofday());

# default constraint
var constraints = [ 
    { 'min_version' : '1.0', 'fixed_version' : '21.0', 'fixed_display':'21.x or later' }
  ];

if (now > 1764547200 && now < 1796083200 ) 
{
  constraints = [
    { 'min_version' : '1.0', 'fixed_version' : '21.0', 'fixed_display':'21.x or later' }
  ];
}
else if (now > 1796083200 && now < 1827619201 ) 
{
  constraints = [
    { 'min_version' : '1.0', 'fixed_version' : '22.0', 'fixed_display':'22.x or later' }
  ];
}
else if (now > 1827619201 && now < 1859241601 ) 
{
  constraints = [
    { 'min_version' : '1.0', 'fixed_version' : '23.0', 'fixed_display':'23.x or later' }
  ];
}
else if (now > 1859241601 && now < 1890777601 ) 
{
  constraints = [
    { 'min_version' : '1.0', 'fixed_version' : '24.0', 'fixed_display':'24.x or later' }
  ];
}
else if (now > 1890777601 && now < 1922313601 ) 
{
  constraints = [
    { 'min_version' : '1.0', 'fixed_version' : '25.0', 'fixed_display':'25.x or later' }
  ];
}


##
# Due to future changes, the VCF additions made for this plugin are being removed.
# The major elements of those changes have been moved, for the moment, to this plugin to maintain functionality while we 
# Remove the code to simplify the future upgrade process.
##

var matching_constraint = vcf::check_version(version:app_info.parsed_version, constraints:constraints);
    if (vcf::is_error(matching_constraint)) return vcf::vcf_exit(1, matching_constraint.message);

var port, fix;
if (!isnull(matching_constraint))
{
  port = app_info.port;
  if (isnull(port)) port = 0;
  
  var version;

  if (isnull(app_info.display_version)) version = app_info.version;
  else version = app_info.display_version;

  register_unsupported_product(product_name:app_info.app , version:version, cpe_base:"cpe:/a:oracle:primavera_unifier");

  fix = matching_constraint.fixed_display;
  if (isnull(fix)) fix = matching_constraint.fixed_version;

  vcf::report_results(app_info:app_info, fix:fix, fix_version:matching_constraint.fixed_version, severity:SECURITY_HOLE);
}
# Audit
else vcf::audit(app_info);

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

27 Mar 2026 00:00Current
6Medium risk
Vulners AI Score6
42