Oracle Primavera Unifier Multiple Vulnerabilities (July 2018 CPU)

According to its self-reported version number, the Oracle Primavera Unifier installation running on the remote web server is 16.x prior to 16.2.15.0, 17.x prior to 17.12.7.0, or 18.x prior to 18.7.0.0. It is, therefore, affected by multiple vulnerabilities. Note that Nessus has not tested for the...

CVE-2018-2966

CVE-2018-2966 affects Oracle Primavera Unifier (Core) within Oracle Construction and Engineering Suite. Affected releases are Primavera Unifier 16.x, 17.x, and 18.x. The vulnerability is exploitable over HTTP and can be triggered by an unauthenticated attacker with network access; exploitation re...