Oracle Primavera P6 Enterprise Project Portfolio Management (Jul 2021 CPU)

The 17.12, 18.8, 19.12, and 20.12 versions of Primavera P6 Enterprise Project Portfolio Management installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2021 CPU advisory. - Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product...

PT-2021-7191

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 20.12.0 through 20.12.3 Description The issue is related to insufficient input validation in the Web Access component of the Primavera P6 Enterprise Project Portfolio Management...

PT-2021-7138

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 17.12.0 through 17.12.20 Primavera P6 Enterprise Project Portfolio Management versions 18.8.0 through 18.8.23 Primavera P6 Enterprise Project Portfolio Management versions 19.12.0...

CVE-2021-2386: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 20.12.0-20.12.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...

CVE-2021-2366: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 17.12.0-17.12.20, 18.8.0-18.8.23, 19.12.0-19.12.14 and 20.12.0-20.12.3. Easily exploitable vulnerability allows...

CVE-2020-14653

The CVE-2020-14653 issue affects Oracle Primavera P6 Enterprise Project Portfolio Management (P6 EPPM) Web Access. Affected versions are 16.1.0.0–16.2.20.1, 17.1.0.0–17.12.17.1, and 18.1.0.0–18.8.18.2. The vulnerability is exploitable over HTTP by a low-privileged, network-accessing attacker and ...

PT-2020-3374

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 16.1.0.0 through 16.2.20.1 Primavera P6 Enterprise Project Portfolio Management versions 17.1.0.0 through 17.12.17.1 Primavera P6 Enterprise Project Portfolio Management versions...

PT-2020-3280

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 17.1.0.0 through 17.12.17.1 Primavera P6 Enterprise Project Portfolio Management versions 18.1.0.0 through 18.8.19 Primavera P6 Enterprise Project Portfolio Management versions...

CVE-2020-14653: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 16.1.0.0-16.2.20.1, 17.1.0.0-17.12.17.1 and 18.1.0.0-18.8.18.2. Easily exploitable vulnerability allows low...

CVE-2020-14706: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 17.1.0.0-17.12.17.1, 18.1.0.0-18.8.19 and 19.12.0-19.12.5. Difficult to exploit vulnerability allows...

Oracle Primavera P6 Enterprise Project Portfolio Management Multiple Vulnerabilities (Jul 2020 CPU)

According to its self-reported version number, the Oracle Primavera P6 Enterprise Project Portfolio Management EPPM installation running on the remote web server is 16.1.x prior to 16.2.20.1, 17.1.x prior to 17.12.17.1, 18.1.x prior to 18.8.19, or 19.12.x prior to 19.12.6.0. It is, therefore,...

Unspecified Vulnerability in Oracle Construction and Engineering Suite Primavera P6 Enterprise Project Portfolio Management

Oracle Construction and Engineering Suite is a suite of portfolio management solutions for construction projects from Oracle Corporation.Primavera P6 Enterprise Project Portfolio Management P6 is one of the components for planning, managing and executing projects. Primavera P6 Enterprise Project...

CVE-2020-2594

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Project Manager. Supported versions that are affected are 16.2.0.0 - 16.2.19.3, 17.12.0.0 - 17.12.17.0, 18.8.0.0 - 18.8.18.0, 19.12.1.0 - 19.12.3.0 and 20.1.0.0 -...

PT-2020-2123

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 16.2.0.0 through 16.2.19.3 Primavera P6 Enterprise Project Portfolio Management versions 17.12.0.0 through 17.12.17.0 Primavera P6 Enterprise Project Portfolio Management versions...

CVE-2020-2706: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Project Manager. Supported versions that are affected are 16.2.0.0 - 16.2.19.3, 17.12.0.0 - 17.12.17.0, 18.8.0.0 - 18.8.18.0, 19.12.1.0 - 19.12.3.0 and 20.1.0.0 -...

CVE-2020-2594: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Project Manager. Supported versions that are affected are 16.2.0.0 - 16.2.19.3, 17.12.0.0 - 17.12.17.0, 18.8.0.0 - 18.8.18.0, 19.12.1.0 - 19.12.3.0 and 20.1.0.0 -...

PT-2020-2122

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 16.2.0.0 through 16.2.19.3 Primavera P6 Enterprise Project Portfolio Management versions 17.12.0.0 through 17.12.17.0 Primavera P6 Enterprise Project Portfolio Management versions...

Core component of the Unauthorized Access

The vulnerability of the Core component of the Oracle Primavero P6 Enterprise Project Portfolio Management application is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information or cause service...

CVE-2020-2556

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Core. Supported versions that are affected are 16.2.0.0-16.2.19.0, 17.12.0.0-17.12.16.0, 18.8.0.0-18.8.16.0, 19.12.0.0 and 20.1.0.0. Easily exploitable vulnerability...

CVE-2020-2556: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Core. Supported versions that are affected are 16.2.0.0-16.2.19.0, 17.12.0.0-17.12.16.0, 18.8.0.0-18.8.16.0, 19.12.0.0 and 20.1.0.0. Easily exploitable vulnerability...