Unauthenticated Vulnerability in Primavera Portfolio Management by Oracle

CVE-2020-14528

What is CVE-2020-14528?

A vulnerability exists in the Oracle Primavera Portfolio Management product, specifically in the Web Access component. Affected versions include 16.1.0.0 through 16.1.5.1, 18.0.0.0 through 18.0.2.0, and version 19.0.0.0. This easily exploitable flaw allows unauthorized individuals with network access via HTTP to compromise the application's security. Successful exploitation requires human interaction from an unsuspecting user. Consequently, attackers could gain unauthorized access to critical data, including the ability to read, insert, update, or delete information within the Primavera Portfolio Management system, impacting additional products connected with it. Organizations using these versions should prioritize patching to prevent potential data breaches.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References