CVE-2016-3568: Medium severity oracle primavera p6 enterprise project portfolio management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3569, CVE-2016-3570, CVE-2016-3571, and CVE-2016-3573.

Affected Software

5 affected components

ORACLE Primavera P6 Enterprise Project Portfolio Management=8.3

ORACLE Primavera P6 Enterprise Project Portfolio Management=8.4

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.1

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.2

ORACLE Primavera P6 Enterprise Project Portfolio Management=16.1

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3568?

CVE-2016-3568 is classified as a significant vulnerability that can impact confidentiality and integrity.

How do I fix CVE-2016-3568?

To fix CVE-2016-3568, apply the latest patches and updates provided by Oracle for the affected Primavera products.

Which versions of Oracle Primavera P6 are affected by CVE-2016-3568?

CVE-2016-3568 affects versions 8.3, 8.4, 15.1, 15.2, and 16.1 of Oracle Primavera P6 Enterprise Project Portfolio Management.

Can CVE-2016-3568 be exploited remotely?

Yes, CVE-2016-3568 allows remote attackers to potentially exploit the vulnerability via Web access.

What should I do if I am using an affected version of Oracle Primavera P6?

If using an affected version of Oracle Primavera P6, immediately update to the patched version released by Oracle to mitigate the risk.