CVE-2017-3508: Critical severity Oracle Primavera Gateway vulnerability
Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite (subcomponent: Primavera Desktop Integration). Supported versions that are affected are 1.0, 1.1, 14.2, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise Primavera Gateway. While the vulnerability is in Primavera Gateway, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Primavera Gateway. CVSS 3.0 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2017-3508?
CVE-2017-3508 has been classified as an easily exploitable vulnerability that poses a high threat to affected versions of Oracle Primavera Gateway.
How do I fix CVE-2017-3508?
To mitigate the risks associated with CVE-2017-3508, update Oracle Primavera Gateway to the latest patched version provided by Oracle.
Which versions are affected by CVE-2017-3508?
CVE-2017-3508 affects Oracle Primavera Gateway versions 1.0, 1.1, 14.2, 15.1, 15.2, 16.1, and 16.2.
Who can exploit CVE-2017-3508?
CVE-2017-3508 can be exploited by a high privileged attacker with network access.
What is the impact of exploiting CVE-2017-3508?
Exploitation of CVE-2017-3508 could lead to unauthorized access or control over the affected Oracle Primavera Gateway components.