CVE-2016-3569: Medium severity oracle primavera p6 enterprise project portfolio management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3568, CVE-2016-3570, CVE-2016-3571, and CVE-2016-3573.

Affected Software

5 affected components

ORACLE Primavera P6 Enterprise Project Portfolio Management=8.3

ORACLE Primavera P6 Enterprise Project Portfolio Management=8.4

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.1

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.2

ORACLE Primavera P6 Enterprise Project Portfolio Management=16.1

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3569?

The severity of CVE-2016-3569 is moderate as it can affect confidentiality and integrity due to vulnerabilities in web access.

How do I fix CVE-2016-3569?

To fix CVE-2016-3569, update your Oracle Primavera P6 Enterprise Project Portfolio Management to the latest patched version provided by Oracle.

Which versions of Oracle Primavera are affected by CVE-2016-3569?

CVE-2016-3569 affects Oracle Primavera P6 versions 8.3, 8.4, 15.1, 15.2, and 16.1.

Can CVE-2016-3569 be exploited remotely?

Yes, CVE-2016-3569 can be exploited remotely through vectors related to web access.

What are the potential impacts of CVE-2016-3569?

The potential impacts of CVE-2016-3569 include compromise of confidentiality and integrity of the system.