Access Vulnerability in Primavera Portfolio Management by Oracle
CVE-2022-21376
Key Information:
- Vendor
Oracle
- Vendor
- CVE Published:
- 19 January 2022
What is CVE-2022-21376?
A vulnerability exists in the Primavera Portfolio Management product by Oracle that allows an unauthenticated attacker to exploit the system via an HTTP connection. This flaw enables the potential for unauthorized updates, inserts, and deletions of accessible data, while also allowing unauthorized read access to certain data. Successful exploitation of this vulnerability necessitates human interaction from a third party, raising concerns over the security of sensitive project data and the integrity of the management system.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Primavera Portfolio Management 18.0.0.0-18.0.3.0
Primavera Portfolio Management 19.0.0.0-19.0.1.2
Primavera Portfolio Management 20.0.0.0
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved