CVE-2017-10038

CVE-2017-10038 affects Oracle Primavera P6 EPPM Web Access in versions 15.1, 15.2, 16.1 and 16.2. The vulnerability arises in the Web Access component, enabling a low-privilege, network-accessible attacker (via HTTP) to access data or broader Primavera data. CVSSv3.0 base score is 6.5 (C:H/I:N/A:...

CVE-2017-10131

CVE-2017-10131 affects Oracle Primavera P6 EPPM Web Access in versions 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. The flaw enables a low-privileged, remote attacker over HTTP to access and potentially modify data, read data, or cause partial denial of service; exploitation requires user interaction. Af...

CVE-2017-10160

CVE-2017-10160 affects Oracle Primavera P6 EPPM Web Access in versions 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. The vulnerability in the Web Access component can be triggered by an unauthenticated or low-privileged attacker over HTTP to obtain unauthorized read access to a subset of data. This aligns...

CVE-2017-10046

CVE-2017-10046 is an HTTP Response Splitting vulnerability in Oracle Primavera P6 Enterprise Project Portfolio Management (Web Access). Affected versions: 8.3, 8.4, 15.1, 15.2, 16.1. An attacker with network access via HTTP and low privileges can exploit a crafted input (languageCode cookie) to m...

PT-2017-11152

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 8.3, 8.4, 15.1, 15.2, 16.1, 16.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio...

CVE-2017-10038: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access. Supported versions that are affected are 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access...

CVE-2017-10046: Improper Privilege Management

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2 and 16.1. Easily exploitable vulnerability allows low privileged attacker with network...

PT-2017-11038

Name of the Vulnerable Software and Affected Versions Primavera P6 Enterprise Project Portfolio Management versions 15.1, 15.2, 16.1, and 16.2 Description The issue allows a low-privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management,...

CVE-2017-10160: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with netwo...

CVE-2017-10131: Undefined Security Weakness

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with netwo...

Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) Detection

Binary data oracleprimaverap6eppm.nbin...

ISC BIND DNS64 Denial of Service Vulnerability - Linux

ISC BIND is prone to a denial of service vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:isc:bind"; ifdescription...

Oracle Primavera P6 Enterprise Project Portfolio Management Privilege Mobilization Vulnerability (CNVD-2017-07251)

Oracle Primavera P6 Enterprise Project Portfolio Management is a comprehensive project portfolio management PPM solution that includes role-specific functionality to meet the needs, responsibilities, and skills of each team member. An elevation of privilege vulnerability exists in Oracle Primaver...

CVE-2017-3579

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows unauthenticated attacker with...

CVE-2017-3579

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows unauthenticated attacker with...

CVE-2017-3583

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows unauthenticated attacker with...

CVE-2017-3503

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access Apache Commons BeanUtils. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows low...

CVE-2017-3503

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access Apache Commons BeanUtils. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows low...

Code injection

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access Apache Commons BeanUtils. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows low...

Design/Logic Flaw

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite subcomponent: Web Access. Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows unauthenticated attacker with...