Web Access Vulnerability in Primavera P6 Enterprise Project Portfolio Management by Oracle

CVE-2025-50061

What is CVE-2025-50061?

An easily exploitable vulnerability has been identified in the Web Access component of Oracle's Primavera P6 Enterprise Project Portfolio Management software. This flaw affects multiple versions of the product, allowing attackers with network access to potentially compromise the system. For successful exploitation, human interaction is required, making the vulnerability particularly concerning given its ability to facilitate unauthorized updates, inserts, or deletions of accessible data and unauthorized read access to certain datasets. The implications of such an attack may extend beyond Primavera P6, possibly impacting other related products as well.

References