Not rated

CVE-2017-10160 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite…

Description

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Affected products and versions

Product	Affected versions	Fixed in
Primavera P6 Enterprise Project Portfolio Management	16.2	No fix stated
Primavera P6 Enterprise Project Portfolio Management	16.1	No fix stated
Primavera P6 Enterprise Project Portfolio Management	15.2	No fix stated
Primavera P6 Enterprise Project Portfolio Management	15.1	No fix stated
Primavera P6 Enterprise Project Portfolio Management	8.4	No fix stated
Primavera P6 Enterprise Project Portfolio Management	8.3	No fix stated

References

1038946 www.securitytracker.com
99793 www.securityfocus.com
www.oracle.com www.oracle.com

Timeline

Published August 8, 2017
Last modified October 4, 2024

The 32 CVEs of Primavera P6 Enterprise Project Portfolio Management →

CVE-2026-91399 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering… 4.3 Medium CVE-2026-91376 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering… 6.5 Medium CVE-2025-50061 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering… 5.4 Medium CVE-2025-21558 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering… 5.4 Medium

Track this CVE