CVE-2017-10160: Medium severity oracle primavera p6 enterprise project portfolio management vulnerability
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Primavera P6 Enterprise Project Portfolio Management accessible data. CVSS 3.0 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-10160?
CVE-2017-10160 is classified as an easily exploitable vulnerability that can be exploited by low privileged attackers.
How do I fix CVE-2017-10160?
To fix CVE-2017-10160, it is recommended to apply the latest security patches provided by Oracle for the affected Primavera P6 versions.
Which versions are affected by CVE-2017-10160?
CVE-2017-10160 affects Oracle Primavera P6 versions 8.3, 8.4, 15.1, 15.2, 16.1, and 16.2.
Who can exploit CVE-2017-10160?
CVE-2017-10160 can be exploited by low privileged attackers with network access.
What component of Oracle is affected by CVE-2017-10160?
CVE-2017-10160 affects the Web Access component of the Primavera P6 Enterprise Project Portfolio Management.