Aller au contenu
Non notée

CVE-2017-10160 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite…

Description

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Produits et versions touchés

Produit Versions touchées Corrigé en
Primavera P6 Enterprise Project Portfolio Management 16.2 Pas de correctif indiqué
Primavera P6 Enterprise Project Portfolio Management 16.1 Pas de correctif indiqué
Primavera P6 Enterprise Project Portfolio Management 15.2 Pas de correctif indiqué
Primavera P6 Enterprise Project Portfolio Management 15.1 Pas de correctif indiqué
Primavera P6 Enterprise Project Portfolio Management 8.4 Pas de correctif indiqué
Primavera P6 Enterprise Project Portfolio Management 8.3 Pas de correctif indiqué
Les 32 CVE de Primavera P6 Enterprise Project Portfolio Management →
Suivre cette CVE