Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) Multiple Vulnerabilities (Jan 2020 CPU)

According to its self-reported version number, the Oracle Primavera P6 EnterpriseProject Portfolio Management EPPM installation running on the remote web server is 15.x prior to 15.2.18.8, 16.x prior to 16.2.19.2, 17.x prior to 17.12.16.1, or 18.8.x prior to 18.8.16., or 19.12.1.0. It is,...

CVE-2020-2707

CVE-2020-2707 concerns Oracle Primavera P6 EPPM WebAccess. Affected versions are 15.1.0.0–15.2.18.7, 16.1.0.0–16.2.19.0, 17.1.0.0–17.12.16.0, 18.1.0.0–18.8.16.0 and 19.12.0.0. The vulnerability is exploitable by a low-privileged attacker with network access via HTTP, with user interaction require...