Oracle Primavera Gateway Multiple Vulnerabilities (Apri 2017 CPU)

According to its self-reported version number, the Oracle Primavera Gateway installation running on the remote web server is 1.x, 14.x prior to 14.2.2.0, 15.x prior to 15.2.12.0, or 16.x prior to 16.2.2.0. It is, therefore, affected by multiple vulnerabilities in the Primavera Desktop Integration...

CVE-2017-3508

CVE-2017-3508 affects Oracle Primavera Gateway ( Primavera Desktop Integration subcomponent ). Affected versions include 1.0, 1.1, 14.2, 15.1, 15.2, 16.1 and 16.2. The flaw allows a high-privileged attacker who can reach the gateway over HTTP (network access) to compromise the Primavera Gateway, ...