409 matches found
Code injection
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 17.1.0-17.12.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2019-3020
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 15.1.0-15.2.18, 16.1.0-16.2.18, 17.1.0-17.12.14 and 18.1.0-18.8.11. Easily exploitable vulnerability allows...
CVE-2019-3020
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 15.1.0-15.2.18, 16.1.0-16.2.18, 17.1.0-17.12.14 and 18.1.0-18.8.11. Easily exploitable vulnerability allows...
CVE-2019-3020
CVE-2019-3020 affects Oracle Primavera P6 Enterprise Project Portfolio Management (Web Access). Affected versions include 15.1.0–15.2.18, 16.1.0–16.2.18, 17.1.0–17.12.14, and 18.1.0–18.8.11. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise EPPM, pote...
CVE-2019-2976
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 17.1.0-17.12.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2019-2976
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 17.1.0-17.12.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
CVE-2019-2976
CVE-2019-2976 affects Oracle Primavera P6 Enterprise Project Portfolio Management (P6 EPPM) Web Access. Connected sources confirm vulnerable versions are 17.1.0–17.12.12. The flaw enables a low-privileged attacker with network access via HTTP to compromise P6 EPPM; exploitation is described as ea...
CVE-2019-3020: Undefined Security Weakness
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 15.1.0-15.2.18, 16.1.0-16.2.18, 17.1.0-17.12.14 and 18.1.0-18.8.11. Easily exploitable vulnerability allows...
CVE-2019-2976: Undefined Security Weakness
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 17.1.0-17.12.12. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to...
Oracle Primavera P6 Enterprise Project Portfolio Management Remote Security Vulnerability
Description Oracle Primavera P6 Enterprise Project Portfolio Management is prone to a remote security vulnerability. The vulnerability can be exploited over the 'HTTP' protocol. The 'Web Access' component is affected. This vulnerability affects the following supported versions: 15.1.0 through...
PT-2019-3631
Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 15.1.0 through 15.2.18 Primavera P6 Enterprise Project Portfolio Management versions 16.1.0 through 16.2.18 Primavera P6 Enterprise Project Portfolio Management versions 17.1.0...
PT-2019-3675
Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 17.1.0 through 17.12.12 Description The issue is related to inadequate access control in the Web Access component of the Primavera P6 Enterprise Project Portfolio Management product...
CVE-2019-2701
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. The supported version that is affected is 18.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...
Design/Logic Flaw
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. The supported version that is affected is 18.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...
CVE-2019-2701
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. The supported version that is affected is 18.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...
CVE-2019-2701
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. The supported version that is affected is 18.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...
CVE-2019-2701
CVE-2019-2701 affects Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) Web Access in the Primavera P6 EPPM component. The vulnerability is present in the 18.8 release and allows a low-privilege, unauthenticated or weakly authenticated attacker with network access over HTTP to re...
PT-2019-16439
Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management version 18.8 Description The issue affects the Web Access subcomponent, allowing a low-privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfoli...
CVE-2019-2701: Undefined Security Weakness
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. The supported version that is affected is 18.8. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP t...
Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) Multiple Vulnerabilities (Apr 2019 CPU)
According to its self-reported version number, the Oracle Primavera P6 Enterprise Project Portfolio Management EPPM installation running on the remote web server is 8.4 prior to 8.4.15.10, 15.x prior to 15.2.18.4, 16.x prior to 16.2.17.2, 17.x prior to 17.12.12.0, or 18.x prior to 18.8.8.0. It is...