Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) Multiple Vulnerabilities (Jan 2019 CPU)

According to its self-reported version number, the Oracle Primavera P6 Enterprise Project Portfolio Management EPPM installation running on the remote web server is 8.4 prior to 8.4.15.9, 15.x prior to 15.2.18.3, 16.x prior to 16.2.17.0, 17.x prior to 17.12.10.0, or 18.x prior to 18.8.5.0. It is,...

CVE-2019-2512

CVE-2019-2512 affects Oracle Primavera P6 EPPM Web Access. Affects multiple supported versions (8.4, 15.1, 15.2, 16.1, 16.2, 17.7–17.12, 18.8). The Web Access subcomponent is vulnerable to an unauthenticated access issue over HTTP, enabling an attacker to compromise Primavera P6 EPPM. The descrip...

CVE-2019-2512

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.1, 15.2, 16.1, 16.2, 17.7-17.12 and 18.8. Difficult to exploit vulnerability allows...