PP
Product
Primavera P6 Enterprise Project Portfolio Management
60
CVEs
0
On KEV
10.0
Max CVSS
0
New 30D
Severity mix
Critical 9High 8Medium 41Low 0
Watch
Add Primavera P6 Enterprise Project Portfolio Management to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2017-3324 | 10.0 | Jan 27 | Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access) Affected: 8.2; 8.3; 8.4; 15.1; 15.2; 16.1; +1 more |
| CVE-2017-3503 | 9.9 | Apr 24 | Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access (Apache Commons BeanUtils)) Affected: 8.3; 8.4; 15.1; 15.2; 16.1; 16.2 |
| CVE-2020-10683 | 9.8 | May 1 | dom4j before 2.0.3 and 2.1.x before 2.1.3 allows external DTDs and External Entities by default, which might enable XXE attacks Affected: 16.1.0.0 through 16.2.20.1; 17.1.0.0 through 17.12.17.1; 18.1.0.0 through 18.8.19.0; 19.12.0.0 through 19.12.6.0 |
| CVE-2018-14718 | 9.8 | Jan 2 | FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the slf4j-ext class from polymorphic… Affected: 17.7 through 17.12; 15.1; 15.2; 16.1; 16.2; 18.8 |
| CVE-2018-19362 | 9.8 | Jan 2 | FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic… Affected: 17.7 through 17.12; 15.1; 15.2; 16.1; 16.2; 18.8 |
| CVE-2018-19361 | 9.8 | Jan 2 | FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization Affected: 17.7 through 17.12; 15.1; 15.2; 16.1; 16.2; 18.8 |
| CVE-2018-19360 | 9.8 | Jan 2 | FasterXML jackson-databind 2.x before 2.9.8 might allow attackers to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic… Affected: 17.7 through 17.12; 15.1; 15.2; 16.1; 16.2; 18.8 |
| CVE-2018-14719 | 9.8 | Jan 2 | FasterXML jackson-databind 2.x before 2.9.7 might allow remote attackers to execute arbitrary code by leveraging failure to block the blaze-ds-opt and blaze-ds-core classes from… Affected: 17.7 through 17.12; 15.1; 15.2; 16.1; 16.2; 18.8 |
| CVE-2019-3020 | 9.3 | Oct 16 | Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access) Affected: 15.1.0 through 15.2.18; 16.1.0 through 16.2.18; 17.1.0 through 17.12.14; 18.1.0 through 18.8.11 |
Showing 9