Web Server Vulnerability in Primavera Portfolio Management by Oracle

CVE-2020-14549

Summary

A vulnerability exists in the Web Server component of Oracle's Primavera Portfolio Management that can be exploited by an unauthenticated attacker with network access via HTTPS. The attack requires user interaction from a third party to succeed. When exploited, this vulnerability can lead to unauthorized access to sensitive data, including the ability to update, insert, or delete data within the Primavera Portfolio Management system. It's essential for organizations using the affected versions to implement appropriate security measures to mitigate the potential risks associated with this vulnerability.

References