CVE-2017-3503: Critical severity ORACLE Primavera P6 Enterprise Project Portfolio Management vulnerability
Vulnerability in the Primavera P6 Enterprise Project Portfolio Management component of Oracle Primavera Products Suite (subcomponent: Web Access (Apache Commons BeanUtils)). Supported versions that are affected are 8.3, 8.4, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera P6 Enterprise Project Portfolio Management. While the vulnerability is in Primavera P6 Enterprise Project Portfolio Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Primavera P6 Enterprise Project Portfolio Management. CVSS 3.0 Base Score 9.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3503?
CVE-2017-3503 has been classified as easily exploitable with low privileges, making it a significant vulnerability.
How do I fix CVE-2017-3503?
To fix CVE-2017-3503, you should apply the latest patches provided by Oracle for the affected Primavera P6 versions.
Which versions of Oracle Primavera are affected by CVE-2017-3503?
CVE-2017-3503 affects Oracle Primavera P6 versions 8.3, 8.4, 15.1, 15.2, 16.1, and 16.2.
What component is impacted by CVE-2017-3503?
CVE-2017-3503 impacts the Web Access component, specifically the Apache Commons BeanUtils within Primavera P6.
Can CVE-2017-3503 be exploited remotely?
Yes, CVE-2017-3503 is categorized as easily exploitable, which raises the risk of remote exploitation.