PT-2020-2122

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 16.2.0.0 through 16.2.19.3 Primavera P6 Enterprise Project Portfolio Management versions 17.12.0.0 through 17.12.17.0 Primavera P6 Enterprise Project Portfolio Management versions...

PT-2020-2123

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 16.2.0.0 through 16.2.19.3 Primavera P6 Enterprise Project Portfolio Management versions 17.12.0.0 through 17.12.17.0 Primavera P6 Enterprise Project Portfolio Management versions...

portfolio-adviser.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1141205 Security Researcher g0bl1nsec Helped patch 3754 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting portfolio-adviser.com...

Code injection

In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, certain personal information is discoverable inspecting network responses on the 'Edit access' screen when sharing portfolios...

CVE-2020-9282

In Mahara 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2, certain personal information is discoverable inspecting network responses on the 'Edit access' screen when sharing portfolios...

CVE-2020-9282

Mahara is affected in versions 18.10 before 18.10.5, 19.04 before 19.04.4, and 19.10 before 19.10.2. The vulnerability allows certain personal information to be discoverable by inspecting network responses on the Edit access screen when sharing portfolios. Root cause details are not provided in t...

The vulnerability of the Core component of the Oracle Primavero P6 Enterprise Project Portfolio Management application allows a malicious individual to gain unauthorized access to protected information or cause service failures.

The vulnerability of the Core component of the Oracle Primavero P6 Enterprise Project Portfolio Management application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service...

WordPress Portfolio Gallery – Image Gallery plugin <= 1.1.2 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability discovered by WPScan Team in WordPress Portfolio Gallery – Image Gallery plugin versions = 1.1.2. Solution Update the WordPress Portfolio Gallery – Image Gallery plugin to the latest available version at least 1.1.3...

WordPress Portfolio Gallery – Image Gallery plugin <= 1.1.2 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by WPScan Team in WordPress Portfolio Gallery – Image Gallery plugin versions = 1.1.2. Solution Update the WordPress Portfolio Gallery – Image Gallery plugin to the latest available version at least 1.1.3...

CVE-2020-2556

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Core. Supported versions that are affected are 16.2.0.0-16.2.19.0, 17.12.0.0-17.12.16.0, 18.8.0.0-18.8.16.0, 19.12.0.0 and 20.1.0.0. Easily exploitable vulnerability...

Unspecified Vulnerability in Oracle Primavera P6 Enterprise Project Portfolio Management (CNVD-2020-14709)

Oracle Construction and Engineering Suite is a suite of portfolio management solutions for construction projects from Oracle Corporation.Primavera P6 Enterprise Project Portfolio Management P6 is one of the components for planning, managing and executing projects. Primavera P6 Enterprise Project...

Unspecified Vulnerability in Oracle Primavera P6 Enterprise Project Portfolio Management (CNVD-2020-14708)

Oracle Construction and Engineering Suite is a suite of portfolio management solutions for construction projects from Oracle Corporation.Primavera P6 Enterprise Project Portfolio Management P6 is one of the components for planning, managing and executing projects. Primavera P6 Enterprise Project...

CVE-2020-2707: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: WebAccess. Supported versions that are affected are 15.1.0.0-15.2.18.7, 16.1.0.0-16.2.19.0, 17.1.0.0-17.12.16.0, 18.1.0.0-18.8.16.0 and 19.12.0.0. Easily exploitable...

CVE-2020-2556: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Core. Supported versions that are affected are 16.2.0.0-16.2.19.0, 17.12.0.0-17.12.16.0, 18.8.0.0-18.8.16.0, 19.12.0.0 and 20.1.0.0. Easily exploitable vulnerability...

PT-2020-1359

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 15.1.0.0 through 15.2.18.7 Primavera P6 Enterprise Project Portfolio Management versions 16.1.0.0 through 16.2.19.0 Primavera P6 Enterprise Project Portfolio Management versions...

CVE-2019-0399

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500702, 600740, 610740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure...

CVE-2019-0399

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500702, 600740, 610740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure...

Information disclosure

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500702, 600740, 610740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure...

CVE-2019-0399

SAP Portfolio and Project Management, before versions S4CORE 102, 103, EPPM 100 and CPRXRPM 500702, 600740, 610740; unintentionally allows a user to discover accounting information of the Projects in Project dashboard, leading to Information Disclosure...

CVE-2019-0399

CVE-2019-0399 affects SAP Portfolio and Project Management (PPM) in SAP S4CORE 1.02/1.03, and EPPM 1.00 with CPRXRPM 500_702/600_740/610_740. The issue is an information-disclosure vulnerability where a user can unintentionally access accounting information from the Projects in Project dashboard....