Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

oracle primavera unifier 16.1 vulnerabilities and exploits

(subscribe to this query)
7.4
CVSSv3
CVE-2018-2966
Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compr...
Oracle Primavera Unifier 16.2.4.0Oracle Primavera Unifier 16.2Oracle Primavera Unifier 16.2.1.0Oracle Primavera Unifier 16.1Oracle Primavera Unifier 17.8Oracle Primavera Unifier 17.9Oracle Primavera Unifier 17.6Oracle Primavera Unifier 17.7Oracle Primavera Unifier 17.3Oracle Primavera Unifier 17.4Oracle Primavera Unifier 17.5Oracle Primavera Unifier 17.12Oracle Primavera Unifier 17.1Oracle Primavera Unifier 17.2Oracle Primavera Unifier 17.10Oracle Primavera Unifier 17.11Oracle Primavera Unifier 18.3Oracle Primavera Unifier 18.4Oracle Primavera Unifier 18.1Oracle Primavera Unifier 18.2Oracle Primavera Unifier 18.7Oracle Primavera Unifier 18.5
5.3
CVSSv3
CVE-2018-2967
Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows physical access to compromise Primavera Unifier. While the vul...
Oracle Primavera Unifier 16.2.1.0Oracle Primavera Unifier 16.2.4.0Oracle Primavera Unifier 16.1Oracle Primavera Unifier 16.2Oracle Primavera Unifier 17.7Oracle Primavera Unifier 17.8Oracle Primavera Unifier 17.5Oracle Primavera Unifier 17.6Oracle Primavera Unifier 17.3Oracle Primavera Unifier 17.4Oracle Primavera Unifier 17.11Oracle Primavera Unifier 17.12Oracle Primavera Unifier 17.1Oracle Primavera Unifier 17.2Oracle Primavera Unifier 17.9Oracle Primavera Unifier 17.10Oracle Primavera Unifier 18.2Oracle Primavera Unifier 18.3Oracle Primavera Unifier 18.1Oracle Primavera Unifier 18.6Oracle Primavera Unifier 18.7Oracle Primavera Unifier 18.4
6.5
CVSSv3
CVE-2018-2968
Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compr...
Oracle Primavera Unifier 16.1Oracle Primavera Unifier 16.2Oracle Primavera Unifier 16.2.1.0Oracle Primavera Unifier 16.2.4.0Oracle Primavera Unifier 17.8Oracle Primavera Unifier 17.9Oracle Primavera Unifier 17.6Oracle Primavera Unifier 17.7Oracle Primavera Unifier 17.4Oracle Primavera Unifier 17.5Oracle Primavera Unifier 17.12Oracle Primavera Unifier 17.1Oracle Primavera Unifier 17.2Oracle Primavera Unifier 17.3Oracle Primavera Unifier 17.10Oracle Primavera Unifier 17.11Oracle Primavera Unifier 18.3Oracle Primavera Unifier 18.4Oracle Primavera Unifier 18.1Oracle Primavera Unifier 18.2Oracle Primavera Unifier 18.7Oracle Primavera Unifier 18.5
5.5
CVSSv3
CVE-2020-9489
A carefully crafted or corrupt file may trigger a System.exit in Tika's OneNote Parser. Crafted or corrupted files can also cause out of memory errors and/or infinite loops in Tika's ICNSParser, MP3Parser, MP4Parser, SAS7BDATParser, OneNoteParser and ImageParser. Apache...
Apache Tika 1.24Oracle Flexcube Private Banking 12.1.0Oracle Primavera Unifier 16.2Oracle Flexcube Private Banking 12.0.0Oracle Primavera Unifier 16.1Oracle Webcenter Portal 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Primavera Unifier 19.12Oracle Webcenter Portal 12.2.1.4.0Oracle Communications Messaging Server 8.1
9.8
CVSSv3
CVE-2018-19360
FasterXML jackson-databind 2.x prior to 2.9.8 might allow malicious users to have unspecified impact by leveraging failure to block the axis2-transport-jms class from polymorphic deserialization.
Fasterxml Jackson-databindDebian Debian Linux 8.0Oracle Primavera Unifier 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 15.1Oracle Primavera Unifier 16.1Oracle Primavera P6 Enterprise Project Portfolio Management 16.1Oracle Primavera P6 Enterprise Project Portfolio Management 15.2Oracle Webcenter Portal 12.2.1.3.0Oracle Business Process Management Suite 12.1.3.0.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera P6 Enterprise Project Portfolio Management 18.8Oracle Primavera Unifier 18.8Oracle Retail Workforce Management Software 1.60.9.0.0Oracle Primavera UnifierRedhat Openshift Container Platform 3.11Redhat Jboss Bpm Suite 6.4.11Redhat Jboss Brms 6.4.10Redhat Automation Manager 7.3.1Redhat Decision Manager 7.3.1
9.8
CVSSv3
CVE-2018-19361
FasterXML jackson-databind 2.x prior to 2.9.8 might allow malicious users to have unspecified impact by leveraging failure to block the openjpa class from polymorphic deserialization.
Fasterxml Jackson-databindDebian Debian Linux 8.0Debian Debian Linux 9.0Oracle Primavera Unifier 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 15.1Oracle Primavera Unifier 16.1Oracle Primavera P6 Enterprise Project Portfolio Management 16.1Oracle Primavera P6 Enterprise Project Portfolio Management 15.2Oracle Webcenter Portal 12.2.1.3.0Oracle Business Process Management Suite 12.1.3.0.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera P6 Enterprise Project Portfolio Management 18.8Oracle Primavera Unifier 18.8Oracle Retail Workforce Management Software 1.60.9.0.0Oracle Primavera UnifierRedhat Openshift Container Platform 3.11Redhat Jboss Bpm Suite 6.4.11Redhat Jboss Brms 6.4.10Redhat Automation Manager 7.3.1Redhat Decision Manager 7.3.1
9.8
CVSSv3
CVE-2018-19362
FasterXML jackson-databind 2.x prior to 2.9.8 might allow malicious users to have unspecified impact by leveraging failure to block the jboss-common-core class from polymorphic deserialization.
Fasterxml Jackson-databindDebian Debian Linux 8.0Oracle Primavera Unifier 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 16.2Oracle Primavera P6 Enterprise Project Portfolio Management 15.1Oracle Primavera Unifier 16.1Oracle Primavera P6 Enterprise Project Portfolio Management 16.1Oracle Primavera P6 Enterprise Project Portfolio Management 15.2Oracle Webcenter Portal 12.2.1.3.0Oracle Business Process Management Suite 12.1.3.0.0Oracle Business Process Management Suite 12.2.1.3.0Oracle Primavera P6 Enterprise Project Portfolio ManagementOracle Primavera P6 Enterprise Project Portfolio Management 18.8Oracle Primavera Unifier 18.8Oracle Retail Workforce Management Software 1.60.9.0.0Oracle Primavera UnifierRedhat Openshift Container Platform 3.11Redhat Jboss Bpm Suite 6.4.11Redhat Jboss Brms 6.4.10Redhat Automation Manager 7.3.1Redhat Decision Manager 7.3.1
5.3
CVSSv3
CVE-2020-13956
Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.
Apache HttpclientQuarkus QuarkusOracle Primavera Unifier 16.2Oracle Primavera Unifier 16.1Oracle Peoplesoft Enterprise Peopletools 8.57Oracle Primavera Unifier 18.8Oracle Data Integrator 12.2.1.3.0Oracle Primavera UnifierOracle Peoplesoft Enterprise Peopletools 8.58Oracle Primavera Unifier 19.12Oracle Data Integrator 12.2.1.4.0Oracle Primavera Unifier 20.12Oracle Peoplesoft Enterprise Pt Peopletools 8.57Oracle Nosql DatabaseOracle Peoplesoft Enterprise Pt Peopletools 8.59Oracle Peoplesoft Enterprise Pt Peopletools 8.58Oracle Retail Customer Management And Segmentation FoundationOracle Sql DeveloperOracle Spatial StudioOracle Jd Edwards Enterpriseone ToolsOracle Jd Edwards Enterpriseone OrchestratorNetapp Snapcenter -
9.8
CVSSv3
CVE-2019-14540
A Polymorphic Typing issue exists in FasterXML jackson-databind prior to 2.9.10. It is related to com.zaxxer.hikari.HikariConfig.
Fasterxml Jackson-databindNetapp Steelstore Cloud Integrated Storage -Netapp Oncommand Workflow Automation -Netapp Oncommand Api Services -Fedoraproject Fedora 30Fedoraproject Fedora 31Debian Debian Linux 8.0Debian Debian Linux 9.0Debian Debian Linux 10.0Redhat Jboss Enterprise Application Platform 7.2Redhat Jboss Enterprise Application Platform 7.3Oracle Retail Xstore Point Of Service 15.0Oracle Primavera Unifier 16.2Oracle Banking Platform 2.4.0Oracle Retail Xstore Point Of Service 7.1Oracle Banking Platform 2.4.1Oracle Primavera Gateway 16.2Oracle Primavera Gateway 15.2Oracle Banking Platform 2.5.0Oracle Primavera Unifier 16.1Oracle Weblogic Server 12.2.1.3.0Oracle Retail Xstore Point Of Service 16.0
5.5
CVSSv3
CVE-2020-17521
Apache Groovy provides extension methods to aid with creating temporary directories. Prior to this fix, Groovy's implementation of those extension methods was using a now superseded Java JDK method call that is potentially not secure on some operating systems in some context...
Apache Groovy 4.0.0Apache GroovyNetapp Snapcenter -Oracle Primavera Unifier 16.2Oracle Primavera Unifier 16.1Oracle Ilearning 6.2Oracle Business Process Management Suite 12.2.1.3.0Oracle Primavera Unifier 18.8Oracle Primavera UnifierOracle Agile Plm 9.3.3Oracle Agile Plm 9.3.6Oracle Primavera Unifier 19.12Oracle Retail Bulk Data Integration 15.0.3.0Oracle Retail Bulk Data Integration 16.0.3.0Oracle Communications Services Gatekeeper 7.0Oracle Retail Merchandising System 16.0.3Oracle Communications Evolved Communications Application Server 7.1Oracle Agile Engineering Data Management 6.2.1.0Oracle Primavera Unifier 20.12Oracle Business Process Management Suite 12.2.1.4.0Oracle Communications Services Gatekeeper 6.0Oracle Communications Services Gatekeeper 6.1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27977IMAPlocal usersCVE-2024-32038CVE-2023-49963CVE-2023-22869CVE-2024-31497localCVE-2024-2961
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook