Oracle Primavera Portfolio Management vulnerabilities

14 CVEs affecting Oracle Primavera Portfolio Management, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-21377, published 2022-01-19.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2019-10219, published 2019-11-08. Medium severity, CVSS 6.1. EPSS: 2.2% chance of exploitation in the next 30 days. A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions.…
CVE-2020-14549, published 2020-07-15. Medium severity, CVSS 5.9. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Server). Supported versions that are affected are 16.1.0.0-16.1.5.1,…
CVE-2020-14527, published 2020-07-15. Medium severity, CVSS 5.9. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 16.1.0.0-16.1.5.1,…
CVE-2020-14566, published 2020-07-15. Medium severity, CVSS 4.3. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 16.1.0.0-16.1.5.1,…
CVE-2020-14528, published 2020-07-15. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 16.1.0.0-16.1.5.1,…
CVE-2020-2562, published 2020-07-15. Medium severity, CVSS 6.1. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Investor Module). Supported versions that are affected are 16.1.0.0-16.1.5.1,…
CVE-2022-21244, published 2022-01-19. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0,…
CVE-2022-21269, published 2022-01-19. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0,…
CVE-2022-21377, published 2022-01-19. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web API). Supported versions that are affected are 18.0.0.0-18.0.3.0, 19.0.0.0-19.0.1.2…
CVE-2022-21376, published 2022-01-19. Medium severity, CVSS 5.4. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0,…

Latest

CVE-2022-21281, published 2022-01-19. Medium severity, CVSS 4.8. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0,…
CVE-2022-21243, published 2022-01-19. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0,…
CVE-2022-21242, published 2022-01-19. Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported versions that are affected are 18.0.0.0-18.0.3.0,…