Vulnerability in Primavera P6 Project Management by Oracle

CVE-2020-2706

Summary

An easily exploitable vulnerability exists in Oracle's Primavera P6 Enterprise Project Portfolio Management that allows a low privileged attacker with network access via HTTP to compromise the system. Successful exploitation may require human interaction and can lead to unauthorized read, update, insert, or delete access to data within Primavera P6. While primarily affecting Primavera P6, the implications of successful attacks can extend to other interconnected systems and applications.

References