Unauthorized Data Access in Primavera P6 by Oracle

CVE-2020-14706

What is CVE-2020-14706?

A vulnerability exists in Primavera P6 Enterprise Project Portfolio Management from Oracle that allows unauthenticated attackers with network access to potentially compromise the system. This flaw can lead to unauthorized access to sensitive project data, and while exploiting it requires human interaction, it may expose critical information. Attackers could gain the ability to update, insert, or delete accessible data, affecting the integrity of the entire project management environment.

References