CVE-2023-21888

Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering component: WebUI. Supported versions that are affected are 18.8.0-18.8.15, 19.12.0-19.12.15, 20.12.0-20.12.10 and 21.12.0-21.12.8. Easily exploitable vulnerability allows low privileged attacker with network...

Oracle Primavera Gateway (Jan 2023 CPU)

The versions of Primavera Gateway installed on the remote host are affected by multiple vulnerabilities as referenced in the January 2023 CPU advisory. - Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering component: Admin Google Protobuf-Java. Supported versions...

CVE-2023-21888

...

CVE-2023-21888

Oracle Primavera Gateway (WebUI) is affected by CVE-2023-21888. Affected versions: 18.8.0–18.8.15, 19.12.0–19.12.15, 20.12.0–20.12.10, 21.12.0–21.12.8. The issue stems from insufficient input validation in the WebUI, allowing a low-privileged attacker with network access over HTTP to compromise P...

CVE-2023-21888

...