CVE-2016-5533: Medium severity oracle primavera p6 enterprise project portfolio management vulnerability

Published Oct 25, 2016

Updated

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.4, 15.x, and 16.x allows remote authenticated users to affect confidentiality and integrity via unknown vectors.

Affected Software

7 affected components

ORACLE Primavera P6 Enterprise Project Portfolio Management=8.4

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.0

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.1

ORACLE Primavera P6 Enterprise Project Portfolio Management=15.2

ORACLE Primavera P6 Enterprise Project Portfolio Management=16.0

ORACLE Primavera P6 Enterprise Project Portfolio Management=16.1

ORACLE Primavera P6 Enterprise Project Portfolio Management=16.2

Remediation

Patch Available

http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html

Event History

Oct 25, 2016

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2016-5533?

The severity of CVE-2016-5533 is considered critical as it affects the confidentiality and integrity of the Primavera P6 Enterprise Project Portfolio Management component.

How do I fix CVE-2016-5533?

To fix CVE-2016-5533, it is recommended to apply the latest security patches provided by Oracle for the affected versions of Primavera P6.

Who is affected by CVE-2016-5533?

CVE-2016-5533 affects remote authenticated users of Oracle Primavera P6 Enterprise Project Portfolio Management versions 8.4, 15.x, and 16.x.

What impacts can result from CVE-2016-5533?

CVE-2016-5533 can potentially allow remote authenticated users to compromise the confidentiality and integrity of sensitive project data.

When was CVE-2016-5533 disclosed?

CVE-2016-5533 was disclosed in October 2016 as part of Oracle's Critical Patch Update.