CVE-2017-3324General(oracle / primavera_p6_enterprise_project_portfolio_management)

LOWCVSS 10.0 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.2, 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. While the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all Primavera P6 Enterprise Project Portfolio Management accessible data as well as unauthorized access to critical data or complete access to all Primavera P6 Enterprise Project Portfolio Management accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Primavera P6 Enterprise Project Portfolio Management. CVSS v3.0 Base Score 10.0 (Confidentiality, Integrity and Availability impacts).

oracle CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Patch / fix

Vendor / third-party advisories

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

primavera_p6_enterprise_project_portfolio_management

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
General: 1 classified signal
1 total mentions across 1 day

Affected systems

Vendors

oracle

Products

primavera_p6_enterprise_project_portfolio_management

7 versions affected across 1 product

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

General

1100.0%

Referenced assets1 URL

By indicator

https://ift.tt/g51Rjc8

Full discourse1 post

Israel@f1tym1145d
General
CVE-2017-3324 | Oracle Primavera P6 Enterprise Project Portfolio Management Web Access access control (BID-95528) https://ift.tt/g51Rjc8 A vulnerability described as critical has been identified in Oracle Primavera P6 Enterprise Project Portfolio Management up to 16.2. The imp…
Post summary
The passage alerts that a critical access control flaw (CVE‑2017‑3324) exists in Oracle Primavera P6 Enterprise up to version 16.2, but offers no PoC, exploit code, or patch information.
0000025
974 followersView on X

CPE platform detail7 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

7 of 7 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	oracle	primavera_p6_enterprise_project_portfolio_management	15.1	-	-
App	oracle	primavera_p6_enterprise_project_portfolio_management	15.2	-	-
App	oracle	primavera_p6_enterprise_project_portfolio_management	16.1	-	-
App	oracle	primavera_p6_enterprise_project_portfolio_management	16.2	-	-
App	oracle	primavera_p6_enterprise_project_portfolio_management	8.2	-	-
App	oracle	primavera_p6_enterprise_project_portfolio_management	8.3	-	-
App	oracle	primavera_p6_enterprise_project_portfolio_management	8.4	-	-

Explore more

Back to dashboard oracle CVEs primavera_p6_enterprise_project_portfolio_management vulnerabilities