Security Advisory

CVE-2022-21243

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-01-19 11:21:52

Last updated 2024-09-24 20:32:50

Assigner oracle

CVSS score 4.3

State PUBLISHED

Description

Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2, 20.0.0.0 and 20.0.0.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Primavera Portfolio Management. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Primavera Portfolio Management. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).

← Browse all CVEs View on cve.org ↗