4.3
Medium
CVE-2022-21243 Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web…
Description
Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2, 20.0.0.0 and 20.0.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Primavera Portfolio Management. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Primavera Portfolio Management 20.0 | 20.0.0.0 → 20.0.0.1 | No fix stated |
| Primavera Portfolio Management | 19.0.0.0-19.0.1.2 | No fix stated |
| Primavera Portfolio Management | 18.0.0.0-18.0.3.0 | No fix stated |
Other CVEs of Primavera Portfolio Management
The 13 CVEs of Primavera Portfolio Management →
CVE-2022-21377
Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web API)
5.4
Medium
CVE-2022-21376
Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web…
5.4
Medium
CVE-2022-21281
Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web…
4.8
Medium
CVE-2022-21269
Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web…
6.1
Medium