CVE-2018-2965

CVE-2018-2965 affects Oracle Primavera Unifier Core (Oracle Construction and Engineering Suite) as part of the 16.x line. The vulnerability is described as unauthenticated remote access over HTTP that allows an attacker to compromise Primavera Unifier, with human interaction required. Consequence...

CVE-2018-2963

CVE-2018-2963 affects Oracle Primavera P6 Enterprise Project Portfolio Management (P6 EPPM) Web Access; affected versions are 8.4, 15.x and 16.x. The vulnerability enables a low-privileged, network-remote attacker (via HTTP) to read a subset of data from P6 EPPM. The available documents do not sp...

CVE-2018-2961

CVE-2018-2961 affects Oracle Primavera P6 Enterprise Project Portfolio Management (P6 EPPM) Web Access. Web-access component vulnerabilities impact supported versions 8.4, 15.x, 16.x, and 17.x, allowing an unauthenticated attacker with network access via HTTP to compromise P6 EPPM. Attacks requir...

CVE-2018-2968

CVE-2018-2968 affects Oracle Primavera Unifier (Core) in Primavera Unifier; affected versions are 16.x, 17.x, 18.x. The vulnerability is exploitable over HTTP by an unauthenticated attacker with network access and requires user interaction to successfully compromise data integrity. The impact, as...

CVE-2018-2966

CVE-2018-2966 affects Oracle Primavera Unifier (Core) within Oracle Construction and Engineering Suite. Affected releases are Primavera Unifier 16.x, 17.x, and 18.x. The vulnerability is exploitable over HTTP and can be triggered by an unauthenticated attacker with network access; exploitation re...

CVE-2018-2967

Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite subcomponent: Core. Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows physical access to compromise Primavera Unifier. While the vulnerability is in...

CVE-2018-2960

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x, 16.x and 17.x. Easily exploitable vulnerability allows unauthenticated attacker with netwo...

Unspecified Vulnerability in Oracle Primavera P6 Enterprise Project Portfolio Management (CNVD-2018-24117)

Oracle Construction and Engineering Suite is a suite of portfolio management solutions for construction projects from Oracle Corporation.Primavera P6 Enterprise Project Portfolio Management P6 is one of the components for planning, managing and executing projects. Primavera P6 Enterprise Project...

Oracle Construction and Engineering Suite Primavera P6 Enterprise Project Portfolio Management Component Remote Vulnerability

Oracle Construction and Engineering Suite is a suite of portfolio management solutions for construction projects from Oracle Corporation.Primavera P6 Enterprise Project Portfolio Management P6 is one of the components for planning, managing and executing projects. Primavera P6 Enterprise Project...

CVE-2018-2849

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 16.2 and 17.1 - 17.12. Easily exploitable vulnerability allows low privileged attacker with network...

Design/Logic Flaw

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 16.2 and 17.1 - 17.12. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-2849

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 16.2 and 17.1 - 17.12. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-2849

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 16.2 and 17.1 - 17.12. Easily exploitable vulnerability allows low privileged attacker with network...

CVE-2018-2620

CVE-2018-2620 is described across multiple sources as a vulnerability in the Platform subcomponent of Oracle’s Primavera Unifier within Oracle Construction and Engineering Suite. Affected are Primavera Unifier versions 10.x, 15.x, 16.x and 17.x. The vulnerability is characterized as easily exploi...