Vulnerability in Primavera P6 Enterprise Project Portfolio Management by Oracle

CVE-2018-3281

Summary

This vulnerability in Oracle's Primavera P6 Enterprise Project Portfolio Management enables unauthenticated attackers to gain unauthorized access through HTTP. Although successful exploits necessitate human interaction, they can lead to potentially severe implications for accessible project data, including unauthorized updates, deletions, and read operations. This vulnerability affects specific versions of the Primavera P6 software, posing a risk not only to the application itself but also potentially impacting other integrated tools within the suite.

References