Non notée

CVE-2017-10038 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite…

Description

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N).

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Primavera P6 Enterprise Project Portfolio Management	16.2	Pas de correctif indiqué
Primavera P6 Enterprise Project Portfolio Management	16.1	Pas de correctif indiqué
Primavera P6 Enterprise Project Portfolio Management	15.2	Pas de correctif indiqué
Primavera P6 Enterprise Project Portfolio Management	15.1	Pas de correctif indiqué

Références

1038946 www.securitytracker.com
99751 www.securityfocus.com
www.oracle.com www.oracle.com

Chronologie

Publiée 8 août 2017
Dernière modification 4 octobre 2024

Les 32 CVE de Primavera P6 Enterprise Project Portfolio Management →

CVE-2026-91399 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering… 4.3 Moyenne CVE-2026-91376 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering… 6.5 Moyenne CVE-2025-50061 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering… 5.4 Moyenne CVE-2025-21558 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering… 5.4 Moyenne

Suivre cette CVE