Oracle Primavera Gateway (October 2026 CPU)

The versions of Primavera Gateway installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering component: Admin Spring Framework. Supported versions tha...

Oracle Primavera Unifier (October 2026 CPU)

The versions of Primavera Unifier installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Document Management Spring Framework. Supporte...

EUVD-2026-106653

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 21.12.0.0-21.12.21.9, 22.12.0.0-22.12.21.4, 23.12.0-23.12.20, 24.12.0-24.12.16 and 25.12.0-25.12.8. Easily...

EUVD-2026-106630

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 21.12.0.0-21.12.21.9, 22.12.0.0-22.12.21.4, 23.12.0-23.12.20, 24.12.0-24.12.16 and 25.12.0-25.12.8. Difficult to...

EUVD-2026-106136

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Project Control. Supported versions that are affected are 23.12.0-23.12.16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Unifier...

EUVD-2026-106137

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Core. Supported versions that are affected are 21.12.0-21.12.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Unifier...

EUVD-2026-105891

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Logging. Supported versions that are affected are 21.12.0-21.12.17, 22.12.0-22.12.15, 23.12.0-23.12.16, 24.12.0-24.12.16 and 25.12.0-25.12.9. Easily exploitable vulnerability allows low privileged...

Oracle Primavera P6 Enterprise Project Portfolio Management (October 2026 CPU)

The versions of Primavera P6 Enterprise Project Portfolio Management installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2026 CPU advisory. - Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and...

CVE-2026-91399

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 21.12.0.0-21.12.21.9, 22.12.0.0-22.12.21.4, 23.12.0-23.12.20, 24.12.0-24.12.16 and 25.12.0-25.12.8. Easily...

CVE-2026-91376

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 21.12.0.0-21.12.21.9, 22.12.0.0-22.12.21.4, 23.12.0-23.12.20, 24.12.0-24.12.16 and 25.12.0-25.12.8. Difficult to...

CVE-2026-101735

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Project Control. Supported versions that are affected are 23.12.0-23.12.16. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Unifier...

CVE-2026-101736

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Core. Supported versions that are affected are 21.12.0-21.12.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera Unifier...

CVE-2026-101475

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Logging. Supported versions that are affected are 21.12.0-21.12.17, 22.12.0-22.12.15, 23.12.0-23.12.16, 24.12.0-24.12.16 and 25.12.0-25.12.9. Easily exploitable vulnerability allows low privileged...

CVE-2026-91399

A vulnerability exists in the Web Access component of Oracle Construction and Engineering Primavera P6 Enterprise Project Portfolio Management . Affected versions include 21.12.0.0-21.12.21.9, 22.12.0.0-22.12.21.4, 23.12.0-23.12.20, 24.12.0-24.12.16, and 25.12.0-25.12.8. A low-privileged attacker...

CVE-2026-91376

A vulnerability in the Web Access component of Oracle Construction and Engineering Primavera P6 Enterprise Project Portfolio Management allows a low-privileged attacker with network access via HTTP to compromise the system. The vulnerability is difficult to exploit and requires human interaction ...

CVE-2026-101736

A vulnerability exists in the Core component of the Primavera Unifier product by Oracle Construction and Engineering, affecting versions 21.12.0-21.12.17 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the system. Succes...

CVE-2026-101735

A vulnerability exists in the Project Control component of Oracle Construction and Engineering's Primavera Unifier product, affecting supported versions 23.12.0-23.12.16 . A low-privileged attacker with network access via HTTP can exploit this flaw to compromise the system. Successful exploitatio...

CVE-2026-101475

A vulnerability exists in the Logging component of the Primavera Unifier product by Oracle Construction and Engineering. Affected versions include 21.12.0-21.12.17 , 22.12.0-22.12.15 , 23.12.0-23.12.16 , 24.12.0-24.12.16 , and 25.12.0-25.12.9 . A low-privileged attacker with network access via HT...

CVE-2026-65829

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 7.3.0 until 16.5.0, reading a suitably crafted Primavera P3 PRX or SureTrak STX file can cause MPXJ to write files to arbitrary locations in the filesystem. This issue is fixed in...

CVE-2026-65829 MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 7.3.0 until 16.5.0, reading a suitably crafted Primavera P3 PRX or SureTrak STX file can cause MPXJ to write files to arbitrary locations in the filesystem. This issue is fixed in...