PG
Product
Primavera Gateway
On CISA KEVExploited in the wild
54
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 12High 25Medium 17Low 0
Watch
Add Primavera Gateway to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-3500 | 8.7 | Apr 24 | Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite (subcomponent: Primavera Desktop Integration) Affected: 1.0; 1.1; 14.2; 15.1; 15.2; 16.1; +1 more |
| CVE-2020-36182 | 8.1 | Jan 7 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 17.12.0 through 17.12.11; 18.8.0 through 18.8.11; 19.12.0 through 19.12.10; 20.12.0 |
| CVE-2020-36180 | 8.1 | Jan 7 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 17.12.0 through 17.12.11; 18.8.0 through 18.8.11; 19.12.0 through 19.12.10; 20.12.0 |
| CVE-2020-36179 | 8.1 | Jan 7 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 17.12.0 through 17.12.11; 18.8.0 through 18.8.11; 19.12.0 through 19.12.10; 20.12.0 |
| CVE-2020-36184 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 17.12.0 through 17.12.11; 18.8.0 through 18.8.11; 19.12.0 through 19.12.10; 20.12.0 |
| CVE-2020-36181 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 17.12.0 through 17.12.11; 18.8.0 through 18.8.11; 19.12.0 through 19.12.10; 20.12.0 |
| CVE-2020-36183 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 17.12.0 through 17.12.11; 18.8.0 through 18.8.11; 19.12.0 through 19.12.10; 20.12.0 |
| CVE-2020-36185 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 17.12.0 through 17.12.11; 18.8.0 through 18.8.11; 19.12.0 through 19.12.10; 20.12.0 |
| CVE-2020-36186 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 17.12.0 through 17.12.11; 18.8.0 through 18.8.11; 19.12.0 through 19.12.10; 20.12.0 |
| CVE-2020-36187 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 17.12.0 through 17.12.11; 18.8.0 through 18.8.11; 19.12.0 through 19.12.10; 20.12.0 |
| CVE-2020-36188 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 17.12.0 through 17.12.11; 18.8.0 through 18.8.11; 19.12.0 through 19.12.10; 20.12.0 |
| CVE-2020-36189 | 8.1 | Jan 6 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 17.12.0 through 17.12.11; 18.8.0 through 18.8.11; 19.12.0 through 19.12.10; 20.12.0 |
| CVE-2020-35728 | 8.1 | Dec 27 | FasterXML jackson-databind 2.x before 2.9.10.8 mishandles the interaction between serialization gadgets and typing, related to… Affected: 17.12.0 through 17.12.11; 18.8.0 through 18.8.11; 19.12.0 through 19.12.10; 20.12.0 |
| CVE-2020-36518 | 7.5 | Mar 11 | jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects Affected: 17.12.0 through 17.12.11; 18.8.0 through 18.8.14; 19.12.0 through 19.12.13; 20.12.0 through 20.12.18; 21.12.0 through 21.12.1 |
| CVE-2021-36090 | 7.5 | Jul 13 | Apache Commons Compress 1.0 to 1.20 denial of service vulnerability Affected: 17.12.0 through 17.12.11; 18.8.0 through 18.8.12; 19.12.0 through 19.12.11; 20.12.0 through 20.12.7 |
| CVE-2020-25649 | 7.5 | Dec 3 | A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly Affected: 17.7 through 17.12; 17.12.0 through 17.12.11; 18.8.0 through 18.8.11; 19.12.0 through 19.12.10; 20.12.0 |
| CVE-2020-11979 | 7.5 | Oct 1 | As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them Affected: 16.2.0 through 16.2.11; 17.12.0 through 17.12.9 |
| CVE-2019-12402 | 7.5 | Aug 30 | The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs Affected: 18.8.0 through 18.8.8; 19.12.0 |
| CVE-2019-14439 | 7.5 | Jul 30 | A Polymorphic Typing issue was discovered in FasterXML jackson-databind 2.x before 2.9.9.2 Affected: 17.7 through 17.12; 15.2; 16.1; 16.2; 18.8.0 |
| CVE-2019-0227 | 7.5 | May 1 | A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006 Affected: 16.2.11; 17.12.6 |
| CVE-2018-15756 | 7.5 | Oct 18 | DoS Attack via Range Requests Affected: 15.2; 16.2; 17.12; 18.8.0 |
| CVE-2018-1272 | 7.5 | Apr 6 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, provide client-side support for multipart requests Affected: 15.2; 16.2; 17.12 |
| CVE-2020-8203 | 7.4 | Jul 15 | Prototype pollution attack when using _.zipObjectDeep in lodash before 4.17.20 Affected: 17.12.0 through 17.12.11; 18.8.0 through 18.8.12; 19.12.0 through 19.12.11; 20.12.0 through 20.12.7 |
| CVE-2019-10086 | 7.3 | Aug 20 | In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property… Affected: 16.2.0 through 16.2.11; 17.12.0 through 17.12.6 |
| CVE-2021-23337 | 7.2 | Feb 15 | Command Injection Affected: 17.12.0 through 17.12.11; 18.8.0 through 18.8.12; 19.12.0 through 19.12.11; 20.12.0 through 20.12.7 |
Showing 25