EUVD-2026-106136

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Project Control. Supported versions that are affected are 23.12.0-23.12.16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Unifier...

CVE-2026-101735

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Project Control. Supported versions that are affected are 23.12.0-23.12.16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Unifier...

CVE-2026-101735

A vulnerability exists in the Project Control component of Oracle Construction and Engineering's Primavera Unifier product, affecting supported versions 23.12.0-23.12.16 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitatio...

PT-2026-119408

Name of the Vulnerable Software and Affected Versions Oracle Primavera Unifier versions 23.12.0 through 23.12.16 Description A flaw in the Project Control component allows a low privileged attacker with network access via HTTP to compromise the system. This can lead to unauthorized read access to...

Oracle Primavera Unifier security vulnerabilities

Oracle Primavera Unifier versions 23.12.0 to 23.12.16 have security vulnerabilities. These vulnerabilities stem from issues with the Project Control component. They may allow low-privilege attackers to access through the HTTP network, unauthorizedly create, delete, or modify critical data or all...

CVE-2025-69970

FUXA v1.2.7 contains an insecure default configuration vulnerability in server/settings.default.js. The 'secureEnabled' flag is commented out by default, causing the application to initialize with authentication disabled. This allows unauthenticated remote attackers to access sensitive API...

CVE-2025-62688

An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker with low-privileged credentials to change their role, gaining full control access to the project...

EUVD-2025-35741

An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker with low-privileged credentials to change their role, gaining full control access to the project...

CVE-2025-62688

An incorrect permission assignment for a critical resource vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerability allows an attacker with low-privileged credentials to change their role, gaining full control access to the project...

AutomationDirect Productivity Suite security vulnerabilities

AutomationDirect Productivity Suite is a programmable logic controller programming software from AutomationDirect, Inc. A security vulnerability exists in AutomationDirect Productivity Suite version 4.4.1.19, which stems from an improper assignment of critical resource permissions and could allow...