CVE-2017-3508

State: Published
Severity: Not scored
Published: Apr 24, 2017
Updated: Oct 4, 2024
Reserved: Dec 6, 2016

Description

Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite (subcomponent: Primavera Desktop Integration). Supported versions that are affected are 1.0, 1.1, 14.2, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise Primavera Gateway. While the vulnerability is in Primavera Gateway, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of Primavera Gateway. CVSS 3.0 Base Score 9.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Primavera GatewayOracle Corporation	1.0Affected 1.1Affected 14.2Affected 15.1Affected 15.2Affected 16.1Affected 16.2Affected

References

http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html
97883vdb-entry
97889vdb-entry
1038289vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.