CVE-2016-3571: Medium severity oracle primavera p6 enterprise project portfolio management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3568, CVE-2016-3569, CVE-2016-3570, and CVE-2016-3573.

Affected Software

5 affected components

ORACLE Primavera P6 Enterprise Project Portfolio Management=8.3

ORACLE Primavera P6 Enterprise Project Portfolio Management=8.4

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.1

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.2

ORACLE Primavera P6 Enterprise Project Portfolio Management=16.1

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3571?

CVE-2016-3571 is considered to have a moderate severity level due to potential impacts on confidentiality and integrity.

How do I fix CVE-2016-3571?

To fix CVE-2016-3571, users should upgrade to the latest version of Oracle Primavera P6 as recommended by Oracle.

What software versions are affected by CVE-2016-3571?

CVE-2016-3571 affects Oracle Primavera P6 Enterprise Project Portfolio Management versions 8.3, 8.4, 15.1, 15.2, and 16.1.

What types of attacks does CVE-2016-3571 allow?

CVE-2016-3571 allows remote attackers to potentially affect confidentiality and integrity through web access vulnerabilities.

Is there a patch available for CVE-2016-3571?

Yes, Oracle has released patches for CVE-2016-3571 as part of their security updates; ensure to apply them promptly.