Unauthorized Access Vulnerability in Primavera Portfolio Management by Oracle

CVE-2022-21269

Summary

A vulnerability in the Primavera Portfolio Management product of Oracle allows an unauthenticated attacker with network access via HTTP to compromise the application. This issue affects multiple supported versions and requires human interaction from a user who is not the attacker to exploit it successfully. Once exploited, it can lead to unauthorized update, insert, or delete actions on accessible data within Primavera, as well as unauthorized read access to a subset of this data. Such vulnerabilities can significantly impact the integrity and confidentiality of the system.

References