Unauthorized Access Vulnerability in Primavera Portfolio Management by Oracle

CVE-2022-21244

Summary

A vulnerability exists in Oracle's Primavera Portfolio Management Web Access component that allows unauthenticated attackers with network access to exploit the system. While successful exploitation requires human interaction from another user, it enables attackers to perform unauthorized operations such as updates, inserts, or deletions of accessible data. This impacts the integrity of the application's data and emphasizes the importance of implementing security practices to mitigate potential risks.

References