CVE-2016-3570: Medium severity oracle primavera p6 enterprise project portfolio management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3568, CVE-2016-3569, CVE-2016-3571, and CVE-2016-3573.

Affected Software

5 affected components

ORACLE Primavera P6 Enterprise Project Portfolio Management=8.3

ORACLE Primavera P6 Enterprise Project Portfolio Management=8.4

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.1

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.2

ORACLE Primavera P6 Enterprise Project Portfolio Management=16.1

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3570?

CVE-2016-3570 is considered a significant vulnerability as it affects the confidentiality and integrity of data in affected versions of Oracle Primavera.

How do I fix CVE-2016-3570?

To fix CVE-2016-3570, update to the latest version of Oracle Primavera P6 Enterprise Project Portfolio Management that addresses this vulnerability.

Which versions of Oracle Primavera are affected by CVE-2016-3570?

CVE-2016-3570 affects Oracle Primavera P6 versions 8.3, 8.4, 15.1, 15.2, and 16.1.

Can CVE-2016-3570 be exploited remotely?

Yes, CVE-2016-3570 can be exploited remotely through specific web access vectors.

What type of vulnerability is CVE-2016-3570?

CVE-2016-3570 is an unspecified vulnerability related to web access in Oracle Primavera Products Suite.