WebAccess Vulnerability in Primavera P6 Project Portfolio Management by Oracle

CVE-2020-2707

Summary

A vulnerability in Oracle's Primavera P6 Enterprise Project Portfolio Management product, specifically within the WebAccess component, allows an attacker with low privileges and network access to exploit the system. This exploit requires human interaction from a third party. Attackers can gain unauthorized access to modify and delete accessible data, as well as unauthorized read access to certain data sets. The ramifications of this vulnerability not only impact Primavera P6 but could also affect other interconnected products.

References