CVE-2016-3572: Medium severity oracle primavera p6 enterprise project portfolio management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Access.

Affected Software

5 affected components

ORACLE Primavera P6 Enterprise Project Portfolio Management=8.3

ORACLE Primavera P6 Enterprise Project Portfolio Management=8.4

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.1

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.2

ORACLE Primavera P6 Enterprise Project Portfolio Management=16.1

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3572?

CVE-2016-3572 is rated as a high-severity vulnerability that affects the confidentiality and integrity of systems.

How do I fix CVE-2016-3572?

To fix CVE-2016-3572, apply the latest patches provided by Oracle for the affected versions of Primavera P6.

Who is affected by CVE-2016-3572?

CVE-2016-3572 affects remote authenticated users of Oracle Primavera P6 Enterprise Project Portfolio Management versions 8.3, 8.4, 15.1, 15.2, and 16.1.

What types of vulnerabilities does CVE-2016-3572 present?

CVE-2016-3572 presents vulnerabilities related to unauthorized access that can potentially compromise data confidentiality and integrity.

When was CVE-2016-3572 disclosed?

CVE-2016-3572 was disclosed as part of Oracle's Critical Patch Update in July 2016.