CVE-2018-13822

Unprotected storage of credentials in CA PPM 14.3 and below, 14.4, 15.1, 15.2 CP5 and below, and 15.3 CP2 and below, allows attackers to access sensitive information...

CVE-2018-2960

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x, 16.x and 17.x. Easily exploitable vulnerability allows unauthenticated attacker with netwo...

CVE-2018-2962

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x, 16.x and 17.x. Difficult to exploit vulnerability allows low privileged attacker with...

Design/Logic Flaw

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x, 16.x and 17.x. Easily exploitable vulnerability allows unauthenticated attacker with netwo...

CVE-2018-2962

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x, 16.x and 17.x. Difficult to exploit vulnerability allows low privileged attacker with...

Micro Focus Project and Portfolio Management Center Man-in-the-Middle Attack Vulnerability

Micro Focus Project and Portfolio Management Center is a suite of project portfolio management software from Micro Focus UK. The software manages hybrid projects by integrating agile tools such as ALM Octane, Agile Manager and CA Rally. A security vulnerability exists in Micro Focus Project and...

CVE-2017-10131

CVE-2017-10131 affects Oracle Primavera P6 EPPM Web Access in versions 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. The flaw enables a low-privileged, remote attacker over HTTP to access and potentially modify data, read data, or cause partial denial of service; exploitation requires user interaction. Af...

CVE-2017-3579

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows unauthenticated attacker with...

CVE-2017-3579

CVE-2017-3579 refers to a vulnerability in Oracle Primavera P6 Enterprise Project Portfolio Management (P6 EPPM), specifically the Web Access subcomponent. Affected versions are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. The issue is exploitable remotely via HTTP by an unauthenticated attacker and, per...

CVE-2017-3263

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Team Member. Supported versions that are affected are 8.2, 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with...

Oracle Primavera Product Remote Vulnerability

Oracle Primavera ProductsPrimavera Products Suite is a suite of project portfolio management solutions from Oracle Corporation.Primavera P6 Enterprise Project Portfolio Management P6 is one of the components for planning, managing, and executing projects. Primavera P6 Enterprise Project Portfolio...

CVE-2016-5533

The CVE-2016-5533 entry concerns Oracle Primavera P6 Enterprise Project Portfolio Management within the Oracle Primavera Products Suite (versions 8.4, 15.x, 16.x). Connected sources provide concrete detail that a remote attacker could compromise confidentiality and integrity by exploiting an unsp...

CVE-2016-3572

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Access...

CVE-2016-3571

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than...

Design/Logic Flaw

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than...

CVE-2016-3572

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Access...

CVE-2016-3572

An issue in Oracle Primavera P6 EPPM (Primavera Products Suite 8.3/8.4/15.1/15.2/16.1) involves an unspecified vulnerability in the Web Access path that could allow remote authenticated users to impact confidentiality and integrity. The connected documents do not reveal root cause, explicit explo...

CVE-2016-3566

CVE-2016-3566 concerns an unspecified vulnerability in Oracle Primavera P6 Enterprise Project Portfolio Management (Oracle Primavera Products Suite) affecting versions 8.3, 8.4, 15.1, 15.2 and 16.1. The description states that remote attackers could impact confidentiality and integrity via Web ac...

CVE-2016-3569

CVE-2016-3569 affects Oracle Primavera P6 Enterprise Project Portfolio Management within Oracle Primavera Products Suite versions 8.3, 8.4, 15.1, 15.2, and 16.1. The vulnerability is described as an unspecified issue that allows remote attackers to affect confidentiality and integrity via vectors...

CVE-2016-3568

CVE-2016-3568 concerns Oracle Primavera P6 Enterprise Project Portfolio Management within Oracle Primavera Products Suite (versions 8.3, 8.4, 15.1, 15.2, 16.1). The description indicates an unspecified vulnerability that could allow remote attackers to affect confidentiality and integrity via web...