Vulnerability in Primavera Gateway of Oracle Construction and Engineering

CVE-2023-21888

Summary

A vulnerability in the Primavera Gateway product from Oracle’s Construction and Engineering division could allow low-privileged attackers with network access to exploit the system via HTTP. The issue affects specific versions of the software and requires human interaction to initiate a successful attack. If exploited, the vulnerability may enable unauthorized updates, deletions, and reading of accessible data, thus compromising the integrity and confidentiality of Primavera Gateway data. Attackers might also gain the potential to affect additional connected products.

References