Web Access Vulnerability in Primavera P6 Enterprise Project Portfolio Management from Oracle

CVE-2021-2366

What is CVE-2021-2366?

A vulnerability exists in Oracle's Primavera P6 Enterprise Project Portfolio Management that allows low privileged attackers with network access through HTTP to exploit the system. This vulnerability, found in the Web Access component, could lead to unauthorized updates, inserts, or deletions of accessible data, as well as unauthorized reading of certain data. Successful exploitation poses a significant risk to data integrity and confidentiality across the affected products.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References