CVE-2017-10038

CVE-2017-10038 affects Oracle Primavera P6 EPPM Web Access in versions 15.1, 15.2, 16.1 and 16.2. The vulnerability arises in the Web Access component, enabling a low-privilege, network-accessible attacker (via HTTP) to access data or broader Primavera data. CVSSv3.0 base score is 6.5 (C:H/I:N/A:...

Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) Multiple Vulnerabilities (July 2017 CPU)

According to its self-reported version number, the Oracle Primavera P6 Enterprise Project Portfolio Management EPPM installation running on the remote web server is 8.3.x prior to 8.3.15.4, 8.4.x prior to 8.4.15.2, 15.x prior to 15.2.15.1, or 16.x prior to 16.2.9.0. It is, therefore, affected by...