Lucene search

[email protected]NVD:CVE-2018-2968

HistoryJul 18, 2018 - 1:29 p.m.

CVE-2018-2968

2018-07-1813:29:03

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

37.8%

JSON

Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Unifier. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Primavera Unifier accessible data. CVSS 3.0 Base Score 6.5 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N).

Affected configurations

Nvd

Node

oracleprimavera_unifierMatch16.1

oracleprimavera_unifierMatch16.2

oracleprimavera_unifierMatch16.2.1.0

oracleprimavera_unifierMatch16.2.4.0

Node

oracleprimavera_unifierMatch17.1

oracleprimavera_unifierMatch17.2

oracleprimavera_unifierMatch17.3

oracleprimavera_unifierMatch17.4

oracleprimavera_unifierMatch17.5

oracleprimavera_unifierMatch17.6

oracleprimavera_unifierMatch17.7

oracleprimavera_unifierMatch17.8

oracleprimavera_unifierMatch17.9

oracleprimavera_unifierMatch17.10

oracleprimavera_unifierMatch17.11

oracleprimavera_unifierMatch17.12

Node

oracleprimavera_unifierMatch18.1

oracleprimavera_unifierMatch18.2

oracleprimavera_unifierMatch18.3

oracleprimavera_unifierMatch18.4

oracleprimavera_unifierMatch18.5

oracleprimavera_unifierMatch18.6

oracleprimavera_unifierMatch18.7

VendorProductVersionCPE
oracleprimavera_unifier16.1cpe:2.3:a:oracle:primavera_unifier:16.1:*:*:*:*:*:*:*
oracleprimavera_unifier16.2cpe:2.3:a:oracle:primavera_unifier:16.2:*:*:*:*:*:*:*
oracleprimavera_unifier16.2.1.0cpe:2.3:a:oracle:primavera_unifier:16.2.1.0:*:*:*:*:*:*:*
oracleprimavera_unifier16.2.4.0cpe:2.3:a:oracle:primavera_unifier:16.2.4.0:*:*:*:*:*:*:*
oracleprimavera_unifier17.1cpe:2.3:a:oracle:primavera_unifier:17.1:*:*:*:*:*:*:*
oracleprimavera_unifier17.2cpe:2.3:a:oracle:primavera_unifier:17.2:*:*:*:*:*:*:*
oracleprimavera_unifier17.3cpe:2.3:a:oracle:primavera_unifier:17.3:*:*:*:*:*:*:*
oracleprimavera_unifier17.4cpe:2.3:a:oracle:primavera_unifier:17.4:*:*:*:*:*:*:*
oracleprimavera_unifier17.5cpe:2.3:a:oracle:primavera_unifier:17.5:*:*:*:*:*:*:*
oracleprimavera_unifier17.6cpe:2.3:a:oracle:primavera_unifier:17.6:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	primavera_unifier	16.1	cpe:2.3:a:oracle:primavera_unifier:16.1:::::::*
oracle	primavera_unifier	16.2	cpe:2.3:a:oracle:primavera_unifier:16.2:::::::*
oracle	primavera_unifier	16.2.1.0	cpe:2.3:a:oracle:primavera_unifier:16.2.1.0:::::::*
oracle	primavera_unifier	16.2.4.0	cpe:2.3:a:oracle:primavera_unifier:16.2.4.0:::::::*
oracle	primavera_unifier	17.1	cpe:2.3:a:oracle:primavera_unifier:17.1:::::::*
oracle	primavera_unifier	17.2	cpe:2.3:a:oracle:primavera_unifier:17.2:::::::*
oracle	primavera_unifier	17.3	cpe:2.3:a:oracle:primavera_unifier:17.3:::::::*
oracle	primavera_unifier	17.4	cpe:2.3:a:oracle:primavera_unifier:17.4:::::::*
oracle	primavera_unifier	17.5	cpe:2.3:a:oracle:primavera_unifier:17.5:::::::*
oracle	primavera_unifier	17.6	cpe:2.3:a:oracle:primavera_unifier:17.6:::::::*

Rows per page:

1-10 of 231

References

www.oracle.com/technetwork/security-advisory/cpujul2018-4258247.html

www.securityfocus.com/bid/104823

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

EPSS

0.001

Percentile

37.8%

JSON

Related for NVD:CVE-2018-2968

cvelist1 prion1 cve1 nessus1 oracle1