Oracle Primavera Unifier Multiple Vulnerabilities (July 2018 CPU)

According to its self-reported version number, the Oracle Primavera Unifier installation running on the remote web server is 16.x prior to 16.2.15.0, 17.x prior to 17.12.7.0, or 18.x prior to 18.7.0.0. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for the...

CVE-2018-2965

CVE-2018-2965 affects Oracle Primavera Unifier Core (Oracle Construction and Engineering Suite) as part of the 16.x line. The vulnerability is described as unauthenticated remote access over HTTP that allows an attacker to compromise Primavera Unifier, with human interaction required. Consequence...