Lucene search

[email protected]CVE-2016-3570

HistoryJul 21, 2016 - 10:14 a.m.

CVE-2016-3570

2016-07-2110:14:08

[email protected]

web.nvd.nist.gov

cve-2016-3570

unspecified vulnerability

oracle primavera

enterprise

project portfolio management

remote attackers

confidentiality

integrity

web access

nvd

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.0%

JSON

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote attackers to affect confidentiality and integrity via vectors related to Web access, a different vulnerability than CVE-2016-3566, CVE-2016-3568, CVE-2016-3569, CVE-2016-3571, and CVE-2016-3573.

Affected configurations

NVD

Node

oracleprimavera_p6_enterprise_project_portfolio_managementMatch8.3

oracleprimavera_p6_enterprise_project_portfolio_managementMatch8.4

oracleprimavera_p6_enterprise_project_portfolio_managementMatch15.1

oracleprimavera_p6_enterprise_project_portfolio_managementMatch15.2

oracleprimavera_p6_enterprise_project_portfolio_managementMatch16.1

CPENameOperatorVersion
oracle:primavera_p6_enterprise_project_portfolio_managementoracle primavera p6 enterprise project portfolio managementeq8.3
oracle:primavera_p6_enterprise_project_portfolio_managementoracle primavera p6 enterprise project portfolio managementeq8.4
oracle:primavera_p6_enterprise_project_portfolio_managementoracle primavera p6 enterprise project portfolio managementeq15.1
oracle:primavera_p6_enterprise_project_portfolio_managementoracle primavera p6 enterprise project portfolio managementeq15.2
oracle:primavera_p6_enterprise_project_portfolio_managementoracle primavera p6 enterprise project portfolio managementeq16.1

CPE	Name	Operator	Version
oracle:primavera_p6_enterprise_project_portfolio_management	oracle primavera p6 enterprise project portfolio management	eq	8.3
oracle:primavera_p6_enterprise_project_portfolio_management	oracle primavera p6 enterprise project portfolio management	eq	8.4
oracle:primavera_p6_enterprise_project_portfolio_management	oracle primavera p6 enterprise project portfolio management	eq	15.1
oracle:primavera_p6_enterprise_project_portfolio_management	oracle primavera p6 enterprise project portfolio management	eq	15.2
oracle:primavera_p6_enterprise_project_portfolio_management	oracle primavera p6 enterprise project portfolio management	eq	16.1

References

www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

www.securityfocus.com/bid/91787

www.securityfocus.com/bid/91884

www.securitytracker.com/id/1036393

5.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

6.1 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

5.5 Medium

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

54.0%

JSON

Related for CVE-2016-3570

nvd6 prion6 cvelist6 cve5 oracle1