CVE-2016-3573: Medium severity oracle primavera p6 enterprise project portfolio management vulnerability

Published Jul 21, 2016

Updated

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3568, CVE-2016-3569, CVE-2016-3570, and CVE-2016-3571.

Affected Software

5 affected components

ORACLE Primavera P6 Enterprise Project Portfolio Management=8.3

ORACLE Primavera P6 Enterprise Project Portfolio Management=8.4

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.1

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.2

ORACLE Primavera P6 Enterprise Project Portfolio Management=16.1

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Event History

Jul 21, 2016

CVE Published

via MITRE·10:00 AM

Data Sourced

via MITRE·10:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2016-3573?

CVE-2016-3573 has been rated as a medium severity vulnerability affecting the confidentiality and integrity of the system.

How do I fix CVE-2016-3573?

To resolve CVE-2016-3573, update your Oracle Primavera P6 Enterprise Project Portfolio Management software to the latest version provided by Oracle.

What versions of software are affected by CVE-2016-3573?

CVE-2016-3573 affects Oracle Primavera P6 versions 8.3, 8.4, 15.1, 15.2, and 16.1.

Can CVE-2016-3573 be exploited remotely?

Yes, CVE-2016-3573 can be exploited by remote attackers via web access vulnerabilities.

What types of attacks does CVE-2016-3573 allow?

CVE-2016-3573 allows attackers to potentially compromise the confidentiality and integrity of the affected systems.