PG
Product
Primavera Gateway
On CISA KEVExploited in the wild
54
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 25Medium 17Low 0
Watch
Add Primavera Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-17521 | 5.5 | Dec 7 | Apache Groovy provides extension methods to aid with creating temporary directories Affected: 17.12.0 through 17.12.10 |
| CVE-2019-12415 | 5.5 | Oct 23 | In Apache POI up to 4.1.0, when using the tool XSSFExportToXml to convert user-provided Microsoft Excel documents, a specially crafted document can allow an attacker to read files… Affected: 17.12.6; 18.8.8.1 |
| CVE-2023-21888 | 5.4 | Jan 18 | Vulnerability in the Primavera Gateway product of Oracle Construction and Engineering (component: WebUI) Affected: 18.8.0 through 18.8.15; 19.12.0 through 19.12.15; 20.12.0 through 20.12.10; 21.12.0 through 21.12.8 |
| CVE-2020-28500 | 5.3 | Feb 15 | Regular Expression Denial of Service (ReDoS) Affected: 17.12.0 through 17.12.11; 18.8.0 through 18.8.12; 19.12.0 through 19.12.11; 20.12.0 through 20.12.7 |