Design/Logic Flaw

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network...

Design/Logic Flaw

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Mobile App. The supported version that is affected is Prior to 20.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Primavera Unifier...

Design/Logic Flaw

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 17.1.0.0-17.12.17.1, 18.1.0.0-18.8.19 and 19.12.0-19.12.5. Difficult to exploit vulnerability allows...

Design/Logic Flaw

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering component: Web Server. Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network...

CVE-2020-2562

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering component: Investor Module. Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2020-2562

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering component: Investor Module. Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network...

CVE-2020-2562

CVE-2020-2562 affects Oracle Primavera Portfolio Management (Investor Module). Affected versions are 16.1.0.0–16.1.5.1, 18.0.0.0–18.0.2.0, and 19.0.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Primavera Portfolio Management, with attacks req...

CVE-2020-14706

CVE-2020-14706 affects Oracle Primavera P6 Enterprise Project Portfolio Management (EPPM) Web Access. Affected versions are 17.1.0.0–17.12.17.1, 18.1.0.0–18.8.19, and 19.12.0–19.12.5. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise EPPM; successful ...

CVE-2020-14706

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 17.1.0.0-17.12.17.1, 18.1.0.0-18.8.19 and 19.12.0-19.12.5. Difficult to exploit vulnerability allows...

CVE-2020-14706

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 17.1.0.0-17.12.17.1, 18.1.0.0-18.8.19 and 19.12.0-19.12.5. Difficult to exploit vulnerability allows...

CVE-2020-14653

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 16.1.0.0-16.2.20.1, 17.1.0.0-17.12.17.1 and 18.1.0.0-18.8.18.2. Easily exploitable vulnerability allows low...

CVE-2020-14653

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 16.1.0.0-16.2.20.1, 17.1.0.0-17.12.17.1 and 18.1.0.0-18.8.18.2. Easily exploitable vulnerability allows low...

CVE-2020-14653

The CVE-2020-14653 issue affects Oracle Primavera P6 Enterprise Project Portfolio Management (P6 EPPM) Web Access. Affected versions are 16.1.0.0–16.2.20.1, 17.1.0.0–17.12.17.1, and 18.1.0.0–18.8.18.2. The vulnerability is exploitable over HTTP by a low-privileged, network-accessing attacker and ...

CVE-2020-14617

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Platform, Mobile App. Supported versions that are affected are 16.1, 16.2, 17.7-17.12, 18.8 and 19.12; Mobile App: Prior to 20.6. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2020-14618

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Mobile App. The supported version that is affected is Prior to 20.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Primavera Unifier...

CVE-2020-14618

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Mobile App. The supported version that is affected is Prior to 20.6. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Primavera Unifier...

CVE-2020-14617

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering component: Platform, Mobile App. Supported versions that are affected are 16.1, 16.2, 17.7-17.12, 18.8 and 19.12; Mobile App: Prior to 20.6. Easily exploitable vulnerability allows low privileged attacker with...

CVE-2020-14617

CVE-2020-14617 covers a vulnerability in Oracle’s Primavera Unifier (Platform and Mobile App). Affected are Primavera Unifier versions 16.1, 16.2, 17.7–17.12, 18.8, and 19.12; Mobile App prior to 20.6. The issue enables a low-privileged, network-accessible attacker (HTTPS) to compromise data or g...

CVE-2020-14618

CVE-2020-14618 affects Oracle Primavera Unifier Mobile App (Oracle Construction and Engineering). Affected: Primavera Unifier prior to version 20.6. Access vector: network over HTTPS with no authentication; exploitation requires user interaction. Impact: unauthorized access to data or unauthorize...

CVE-2020-14566

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering component: Web Access. Supported versions that are affected are 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0 and 19.0.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network acces...