325 matches found
Design/Logic Flaw
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x, 16.x and 17.x. Easily exploitable vulnerability allows unauthenticated attacker with netwo...
CVE-2018-2962
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x, 16.x and 17.x. Difficult to exploit vulnerability allows low privileged attacker with...
CVE-2018-2963
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x and 16.x. Easily exploitable vulnerability allows low privileged attacker with network acce...
CVE-2018-2960
CVE-2018-2960 affects Oracle’s Primavera P6 Enterprise Project Portfolio Management (EPPM) Web Access subcomponent. The vulnerability is reported in the Primavera P6 EPPM as affecting supported versions 8.4, 15.x, 16.x, and 17.x. It allows an unauthenticated attacker who can reach the server over...
CVE-2018-2963
CVE-2018-2963 affects Oracle Primavera P6 Enterprise Project Portfolio Management (P6 EPPM) Web Access; affected versions are 8.4, 15.x and 16.x. The vulnerability enables a low-privileged, network-remote attacker (via HTTP) to read a subset of data from P6 EPPM. The available documents do not sp...
CVE-2018-2963
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x and 16.x. Easily exploitable vulnerability allows low privileged attacker with network acce...
CVE-2018-2960
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x, 16.x and 17.x. Easily exploitable vulnerability allows unauthenticated attacker with netwo...
CVE-2018-2962
CVE-2018-2962 affects Oracle Primavera P6 EPPM Web Access subcomponent across 8.4, 15.x, 16.x, and 17.x. The vulnerability is exploitable by a low-privileges user who can reach Primavera P6 over HTTP, with exploitation requiring user interaction. The impact includes possible unauthorized update/i...
CVE-2018-2961
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x, 16.x and 17.x. Easily exploitable vulnerability allows unauthenticated attacker with netwo...
CVE-2018-2961
CVE-2018-2961 affects Oracle Primavera P6 Enterprise Project Portfolio Management (P6 EPPM) Web Access. Web-access component vulnerabilities impact supported versions 8.4, 15.x, 16.x, and 17.x, allowing an unauthenticated attacker with network access via HTTP to compromise P6 EPPM. Attacks requir...
CVE-2018-2961
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x, 16.x and 17.x. Easily exploitable vulnerability allows unauthenticated attacker with netwo...
CVE-2018-2960
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 8.4, 15.x, 16.x and 17.x. Easily exploitable vulnerability allows unauthenticated attacker with netwo...
Unspecified Vulnerability in Oracle Primavera P6 Enterprise Project Portfolio Management (CNVD-2018-24115)
Oracle Construction and Engineering Suite is a suite of portfolio management solutions for construction projects from Oracle Corporation.Primavera P6 Enterprise Project Portfolio Management P6 is one of the components for planning, managing and executing projects. Primavera P6 Enterprise Project...
CVE-2018-2849
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 16.2 and 17.1 - 17.12. Easily exploitable vulnerability allows low privileged attacker with network...
Design/Logic Flaw
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 16.2 and 17.1 - 17.12. Easily exploitable vulnerability allows low privileged attacker with network...
CVE-2018-2849
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 16.2 and 17.1 - 17.12. Easily exploitable vulnerability allows low privileged attacker with network...
CVE-2018-2849
CVE-2018-2849 affects Oracle Primavera P6 EPPM (Oracle Construction and Engineering Suite) Web Access subcomponent. Affected versions include 16.2 and 17.1–17.12. The vulnerability exists in Primavera P6 EPPM and can be exploited by a low-privileged attacker with network access via HTTP to gain u...
CVE-2018-2849
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Construction and Engineering Suite subcomponent: Web Access. Supported versions that are affected are 16.2 and 17.1 - 17.12. Easily exploitable vulnerability allows low privileged attacker with network...
Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) Multiple Vulnerabilities (April 2018 CPU)
According to its self-reported version number, the Oracle Primavera P6 Enterprise Project Portfolio Management EPPM installation running on the remote web server is 16.x prior to 16.2.13.0, or 17.x prior to 17.12.3.0. It is, therefore, affected by the multiple vulnerabilities. Note that Nessus ha...
Oracle Primavera P6 Enterprise Project Portfolio Management - HTTP Response Splitting
Exploit Title: Oracle Primavera P6 Enterprise Project Portfolio Management HTTP Response Splitting Date: 16-02-2018 Exploit Author: Marios Nicolaides - RUNESEC Reviewers: Simon Loizides and Nicolas Markitanis - RUNESEC Vendor Homepage: https://www.oracle.com Affected Software: Oracle Primavera P6...