CVE-2020-14618

CVE-2020-14618 affects Oracle Primavera Unifier Mobile App (Oracle Construction and Engineering). Affected: Primavera Unifier prior to version 20.6. Access vector: network over HTTPS with no authentication; exploitation requires user interaction. Impact: unauthorized access to data or unauthorize...

Unspecified Vulnerability in Oracle Construction and Engineering Primavera Unifier

Oracle Primavera Unifier is a project lifecycle management solution for capital planning, project delivery, cost control, and facilities and real estate management, providing management of all project phases from planning and construction to operations and maintenance. A security vulnerability...

CVE-2020-14618: Undefined Security Weakness

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Mobile App. The supported version that is affected is Prior to 20.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Primavera Unifier...

CVE-2020-14617: Undefined Security Weakness

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Platform, Mobile App. Supported versions that are affected are 16.1, 16.2, 17.7-17.12, 18.8 and 19.12; Mobile App: Prior to 20.6. Easily exploitable vulnerability allows low privileged attacker with...

Oracle Primavera Unifier Multiple Vulnerabilities (Jul 2020 CPU)

According to its self-reported version number, the Oracle Primavera Unifier installation running on the remote web server is 16.1.x or 16.2.x prior to 16.2.16.2, or 17.7.x through 17.12.x prior to 17.12.11.4, or 18.8.x prior to 18.8.17, or 19.12.x prior to 19.12.7. It is, therefore, affected by...

PT-2020-3456

Name of the Vulnerable Software and Affected Versions Oracle Primavera Unifier versions 16.1, 16.2, 17.7 through 17.12, 18.8, 19.12 Oracle Primavera Unifier Mobile App versions prior to 20.6 Description The issue is related to inadequate access control in the Primavera Unifier product, allowing a...

PT-2020-3455

Name of the Vulnerable Software and Affected Versions Oracle Primavera Unifier versions prior to 20.6 Description The issue is related to inadequate access control in the Mobile App component of Oracle Primavera Unifier, allowing an unauthenticated attacker with network access via HTTPS to...

Oracle Primavera Unifier (Apr 2020 CPU)

The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the CPUApr2020 advisory. - initDocumentParser in xml/XMLSchedulingDataProcessor.java in Terracotta Quartz Scheduler through 2.3.0 allows X...

Oracle Primavera Unifier Multiple Vulnerabilities (Jan 2020 CPU)

According to its self-reported version number, the Oracle Primavera Unifier installation running on the remote web server is 16.1.x or 16.2.x prior to 16.2.16.0, or 17.7.x through 17.12.x prior to 17.12.11.2, or 18.8.x prior to 18.8.15, or 19.12.x prior to 19.12.0.1. It is, therefore, affected by...

Oracle Primavera Unifier Multiple Vulnerabilities (Oct 2019 CPU)

According to its self-reported version number, the Oracle Primavera Unifier installation running on the remote web server is 16.1.x or 16.2.x prior to 16.2.15.10, or 17.7.x through 17.12.x prior to 17.12.11.1, or 18.8.x prior to 18.8.13.0. It is, therefore, affected by multiple vulnerabilities: -...

Oracle Primavera Unifier Multiple Vulnerabilities (Jul 2019 CPU)

According to its self-reported version number, the Oracle Primavera Unifier installation running on the remote web server is 15.x or 16.x prior to 16.2.15.9 or 17.7.x prior to 17.12.11 or 18.x prior to 18.8.11. It is, therefore, affected by multiple vulnerabilities: - A deserialization...

Oracle Primavera Unifier Multiple Vulnerabilities (Apr 2019 CPU)

According to its self-reported version number, the Oracle Primavera Unifier installation running on the remote web server is 16.x prior to 16.2.15.7 or 17.7.x prior to 17.12.10 or 18.x prior to 18.8.6. It is, therefore, affected by multiple vulnerabilities: - A deserialization vulnerability in...

The vulnerability of the Web Access component of the Oracle Primavera Unifier application, which allows a hacker to gain unauthorized access to data.

The vulnerability of the Web Access component of the Oracle Primavera Unifier application, which is used for automating project management processes, is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized acces...

The vulnerability of the Core component (jackson-databind) of the Primavera Unifier application, which allows a hacker to execute arbitrary code or cause service failures.

The vulnerability of the Core component jackson-databind of the Primavera Unifier application for automating project management processes is related to errors in the code. Exploiting this vulnerability may allow a malicious actor to execute arbitrary code or cause service failures using the HTTP...

Oracle Primavera Unifier Multiple Vulnerabilities (Oct 2018 CPU)

According to its self-reported version number, the Oracle Primavera Unifier installation running on the remote web server is 15.x, 16.x prior to 16.2.15.4, 17.x prior to 17.12.8.2, or 18.x prior to 18.8.2.2. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested f...

CVE-2018-3148

Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 15.1, 15.2, 16.1, 16.2, 17.1-17.12 and 18.1-18.8. Easily exploitable vulnerability allows unauthenticated attacker with network access v...

CVE-2018-3148

Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 15.1, 15.2, 16.1, 16.2, 17.1-17.12 and 18.1-18.8. Easily exploitable vulnerability allows unauthenticated attacker with network access v...

Code injection

Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 15.1, 15.2, 16.1, 16.2, 17.1-17.12 and 18.1-18.8. Easily exploitable vulnerability allows unauthenticated attacker with network access v...

CVE-2018-3148

Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 15.1, 15.2, 16.1, 16.2, 17.1-17.12 and 18.1-18.8. Easily exploitable vulnerability allows unauthenticated attacker with network access v...

CVE-2018-3148

Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 15.1, 15.2, 16.1, 16.2, 17.1-17.12 and 18.1-18.8. Easily exploitable vulnerability allows unauthenticated attacker with network access v...