Lucene search
+L

767 matches found

IBM Security Bulletins
IBM Security Bulletins
added 2022/09/22 3:2 a.m.23 views

Security Bulletin: Security Vulnerability in IBM WebSphere Application Server (CVE-2015-1920) affects Asset and Service Management

Summary A vulnerability in WebSphere Application Server could allow a remote attacker to execute arbitrary code by connecting to a management port and executing a specific sequence of instructions. The vulnerability affects Maximo Asset Management, Maximo Asset Management Essentials, Maximo...

10CVSS6.8AI score0.06885EPSS
SaveExploits0Affected Software15
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/22 3:2 a.m.36 views

Security Bulletin: Multiple vulnerabilities have been identified in IBM WebSphere Application Server shipped with Asset and Service Management (CVE-2015-4872, CVE-2015-4734, CVE-2015-5006)

Summary IBM WebSphere Application Server is shipped as a component of Maximo Asset Management, Maximo Asset Management Essentials, Maximo Industry Solutions including Maximo for Aviation, Maximo for Energy Optimization, Maximo for Government, Maximo for Nuclear Power, Maximo for Transportation,...

5CVSS6.5AI score0.04695EPSS
SaveExploits0Affected Software15
IBM Security Bulletins
IBM Security Bulletins
added 2022/09/22 3:2 a.m.34 views

Security Bulletin: Security Vulnerability in IBM WebSphere Application Server (CVE-2015-4000) Affects Asset and Service Management

Summary The LogJam Attack on Diffie-Hellman ciphers CVE-2015-4000 may affect some configurations of IBM WebSphere Application Server. The vulnerability affects Maximo Asset Management, Maximo Asset Management Essentials, Maximo Industry Solutions including Maximo for Energy Optimization, Maximo f...

3.7CVSS4.2AI score0.9986EPSS
SaveExploits1Affected Software15
Tenable Nessus
Tenable Nessus
added 2022/08/18 12:0 a.m.43 views

Oracle Primavera Unifier Unsupported Version Detection

According to its version, the installation of Oracle Primavera Unifier application running on the remote host is no longer supported per: - End Of Support Date or End Of Life Date for Primavera Unifier and Its Enabling Software Environment Doc ID 2526166.1 Lack of support implies that no new...

6AI score
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/07/21 12:0 a.m.65 views

Oracle Primavera Gateway (Jul 2022 CPU)

The versions of Primavera Gateway installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2022 CPU advisory. - Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering component: Admin jackson-databind. Supported versions that a...

9.8CVSS7.7AI score0.99677EPSS
SaveExploits104References5
NCSC
NCSC
added 2022/07/20 12:0 a.m.5 views

Vulnerabilities fixed in Oracle Primavera

Oracle has fixed vulnerabilities in the following products: Primavera Gateway Primavera P6 Enterprise Project Portfolio Management Primavera Unifier The vulnerabilities potentially enable a malicious party to execute attacks that lead to denial-of-service DoS. An overview of all fixed...

7.5CVSS6.6AI score0.0486EPSS
SaveExploits1
Tenable Nessus
Tenable Nessus
added 2022/07/20 12:0 a.m.46 views

Oracle Primavera Unifier (Jul 2022 CPU)

The versions of Primavera Unifier installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2022 CPU advisory. - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Document Management jackson-databind. Supported...

7.5CVSS7AI score0.0486EPSS
SaveExploits1References5
BDU FSTEC
BDU FSTEC
added 2022/06/23 12:0 a.m.8 views

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application allows a hacker to gain unauthorized access to protected data.

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application exists due to insufficient verification of input data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected data using the HTTP...

4.3CVSS6.4AI score0.00662EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/15 12:0 a.m.9 views

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application allows a perpetrator to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Web Access component of the Oracle Primavera P6 Enterprise Project Portfolio Management application exists due to insufficient verification of input data. Exploiting this vulnerability may allow an attacker to gain unauthorized access to protected information, or to modif...

6.4CVSS6.9AI score0.00555EPSS
SaveExploits0References3Affected Software1
NCSC
NCSC
added 2022/04/20 12:0 a.m.12 views

Vulnerabilities fixed in Oracle Construction and Engineering

Oracle has fixed vulnerabilities in the following Construction and Engineering products: Primavera Unifier Instantis EnterpriseTrack The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS...

9.8CVSS9.3AI score0.97906EPSS
SaveExploits12
Tenable Nessus
Tenable Nessus
added 2022/04/20 12:0 a.m.93 views

Oracle Primavera Unifier (Apr 2022 CPU)

The version of Primavera Unifier installed on the remote host is affected by multiple vulnerabilities as referenced in the April 2022 CPU advisory. - Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Platform dojo. Supported versions that are affecte...

9.8CVSS6.8AI score0.40768EPSS
SaveExploits3References4
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:0 a.m.8 views

The vulnerability of the Web Access component of the Primavera Portfolio Management software allows a malicious individual to gain unauthorized access to read, modify, or delete data.

The vulnerability of the Web Access component of Primavera Portfolio Management software relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, modify, or delete data using the HTTP protocol...

4.3CVSS6.4AI score0.00879EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/11 12:0 a.m.8 views

The vulnerability of the Web Access component of the Primavera Portfolio Management software allows a malicious individual to gain unauthorized access to read, modify, or delete data.

The vulnerability of the Web Access component of Primavera Portfolio Management software relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to read, modify, or delete data using the HTTP protocol...

6.1CVSS6.8AI score0.00825EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:0 a.m.8 views

The vulnerability of the Web Access component of the Primavera Portfolio Management software allows a malicious individual to gain unauthorized access to read, modify, or delete data.

The vulnerability of the Web Access component of Primavera Portfolio Management, a software solution for automating production process management, is related to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

5.4CVSS6.6AI score0.00524EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:0 a.m.13 views

The vulnerability of the Web Access component of the Primavera Portfolio Management software allows a malicious individual to gain unauthorized access to read, modify, or delete data.

The vulnerability of the Web Access component of Primavera Portfolio Management, a software solution for automating production process management, is related to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

4.9CVSS6.5AI score0.00498EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:0 a.m.10 views

The vulnerability of the Web Access component of the Primavera Portfolio Management software allows a perpetrator to trigger a service failure.

The vulnerability of the Web Access component of the Primavera Portfolio Management software solution relates to insufficient validation of input data. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using HTTP protocols over the network...

4.3CVSS6.4AI score0.00813EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/07 12:0 a.m.8 views

The vulnerability of the Web Access component of the Primavera Portfolio Management software allows a malicious individual to gain unauthorized access to read, modify, or delete data.

The vulnerability of the Web Access component of Primavera Portfolio Management, a software solution for automating production process management, is related to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

5.8CVSS6.6AI score0.00825EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/01/20 12:0 a.m.154 views

Oracle Primavera Gateway (Jan 2022 CPU)

The 17.12.11, 18.8.13, 19.12.12, 20.12.7, and 21.12.0 versions of Primavera Gateway installed on the remote host are affected by a vulnerability as referenced in the January 2022 CPU advisory. - Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering component: Admin...

10CVSS7.5AI score0.99999EPSS
SaveExploits361References3
Tenable Nessus
Tenable Nessus
added 2022/01/20 12:0 a.m.173 views

Oracle Primavera P6 Enterprise Project Portfolio Management (Jan 2022 CPU)

The version of Primavera P6 Enterprise Project Portfolio Management installed on the remote host are affected by a vulnerability as referenced in the January 2022 CPU advisory. - Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineeri...

10CVSS7.5AI score0.99999EPSS
SaveExploits366References4
ATTACKERKB
ATTACKERKB
added 2022/01/19 12:15 p.m.6 views

CVE-2022-21377

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering component: Web API. Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2 and 20.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access v...

5.8CVSS6AI score0.00825EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder