Product by Oracle

    Oracle Primavera P6 Enterprise Project Portfolio Management

    65 known vulnerabilities in Oracle Primavera P6 Enterprise Project Portfolio Management (Oracle), 0 of them actively exploited (CISA KEV).

    Key figures

    65

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    9

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Oracle Primavera P6 Enterprise Project Portfolio Management (Oracle)
    CriticalCVE-2018-14718

    FasterXML Jackson-databind: Deserialization of Untrusted Data

    also in 24 other products

    		9.8
    CriticalCVE-2018-19361

    FasterXML Jackson-databind: Deserialization of Untrusted Data

    also in 11 other products

    		9.8
    CriticalCVE-2018-19362

    FasterXML Jackson-databind: Deserialization of Untrusted Data

    also in 11 other products

    		9.8
    CriticalCVE-2018-19360

    FasterXML Jackson-databind: Deserialization of Untrusted Data

    also in 11 other products

    		9.8
    CriticalCVE-2018-14719

    FasterXML Jackson-databind: Deserialization of Untrusted Data

    also in 19 other products

    		9.8
    CriticalCVE-2020-10683

    Dom4j Project Dom4j: XML External Entity (XXE)

    also in 36 other products

    		9.8
    HighCVE-2020-5421

    RFD Protection Bypass via jsessionid

    also in 36 other products

    		8.7
    MediumCVE-2021-44832

    Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration

    also in 21 other products

    		6.6
    HighCVE-2016-0635

    Oracle Insurance Policy Administration J2EE: security vulnerability

    also in 9 other products

    		8.8
    MediumCVE-2021-45105

    Apache Log4j2 does not always protect from infinite recursion in lookup evaluation

    also in 107 other products

    		5.9
    HighCVE-2018-1000632

    Dom4j Project Dom4j: security vulnerability

    also in 12 other products

    		7.5
    HighCVE-2020-36518

    FasterXML Jackson-databind: Denial of Service

    also in 37 other products

    		7.5
    CriticalCVE-2017-3503

    Oracle Primavera P6 Enterprise Project Portfolio Management: security vulnerability

    also in 1 other product

    		9.9
    CriticalCVE-2017-3324

    Oracle Primavera P6 Enterprise Project Portfolio Management: Denial of Service

    		10.0
    HighCVE-2021-2351

    Oracle WebLogic Server: security vulnerability

    also in 97 other products

    		8.3
    MediumCVE-2018-0735

    Timing attack against ECDSA signature generation

    also in 21 other products

    		5.9
    MediumCVE-2018-1288

    Apache Kafka: security vulnerability

    also in 5 other products

    		5.4
    HighCVE-2017-3583

    Oracle Primavera P6 Enterprise Project Portfolio Management: security vulnerability

    also in 1 other product

    		8.1
    MediumCVE-2017-10046

    Oracle Primavera P6 Enterprise Project Portfolio Management: security vulnerability

    also in 1 other product

    		5.4
    CriticalCVE-2019-3020

    Oracle Primavera P6 Enterprise Project Portfolio Management: security vulnerability

    also in 1 other product

    		9.3
    MediumCVE-2018-11039

    Pivotal Spring Framework: Cross-Site Scripting (XSS)

    also in 33 other products

    		5.9
    MediumCVE-2019-17091

    Eclipse Mojarra: Cross-Site Scripting (XSS)

    also in 21 other products

    		6.1
    MediumCVE-2018-5407

    Oracle Primavera P6 Enterprise Project Portfolio Management: Exposure of Sensitive Information to an Unauthorized Actor

    also in 18 other products

    		4.7
    MediumCVE-2019-10219

    Hibernate Hibernate-validator: Cross-site Scripting

    also in 166 other products

    		6.5
    MediumCVE-2017-10038

    Oracle Primavera P6 Enterprise Project Portfolio Management: security vulnerability

    also in 1 other product

    		6.5

    All vulnerabilities in search

    News

    All products by Oracle