PG
Product
Primavera Gateway
On CISA KEVExploited in the wild
54
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 25Medium 17Low 0
Watch
Add Primavera Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2019-17571 | 9.8 | Dec 20 | Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with… Affected: 16.2 through 16.2.11; 17.12.0 through 17.12.7 |
| CVE-2019-17195 | 9.8 | Oct 15 | Connect2id Nimbus JOSE+JWT before v7.9 can throw various uncaught exceptions while parsing a JWT, which could result in an application crash (potential information disclosure) or… Affected: 18.8.0 through 18.8.11; 19.12.0 |
| CVE-2019-17531 | 9.8 | Oct 12 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10 Affected: 17.7 through 17.12.6; 18.8.0 through 18.8.8; 16.1; 16.2; 19.12.0 |
| CVE-2019-17495 | 9.8 | Oct 10 | A Cascading Style Sheets (CSS) injection vulnerability in Swagger UI before 3.23.11 allows attackers to use the Relative Path Overwrite (RPO) technique to perform CSS-based input… Affected: 16.2.0 through 16.2.11; 17.12.0 through 17.12.8 |
| CVE-2019-16943 | 9.8 | Oct 1 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10 Affected: 17.7 through 17.12.6; 18.8.0 through 18.8.8; 16.1; 16.2; 19.12.0 |
| CVE-2019-16942 | 9.8 | Oct 1 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.0.0 through 2.9.10 Affected: 17.12.0 through 17.12.6; 18.8.0 through 18.8.8; 19.12.0 |
| CVE-2019-16335 | 9.8 | Sep 15 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10 Affected: 17.7 through 17.12; 15.2; 16.1; 16.2; 18.8.0 |
| CVE-2019-14540 | 9.8 | Sep 15 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2.9.10 Affected: 15.2; 15.2.18; 16.2; 16.2.11; 17.12; 17.12.6; +2 more |
| CVE-2019-14379 | 9.8 | Jul 29 | SubTypeValidator.java in FasterXML jackson-databind before 2.9.9.2 mishandles default typing when ehcache is used (because of… Affected: 15.2; 16.2; 17.12; 18.8.0 |
| CVE-2018-1275 | 9.8 | Apr 11 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a… Affected: 15.2; 16.2; 17.12 |
| CVE-2018-1270 | 9.8 | Apr 6 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a… Affected: 15.2; 16.2; 17.12 |
| CVE-2017-3508 | 9.1 | Apr 24 | Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite (subcomponent: Primavera Desktop Integration) Affected: 1.0; 1.1; 14.2; 15.1; 15.2; 16.1; +1 more |
Showing 12