CVE-2017-3500 — Corporation Primavera Gateway vulnerability

5 documents4 sources

Severity

8.7HIGHNVD

EPSS

0.5%

top 32.32%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Corporation Primavera Gateway Oracle Primavera Gateway

Timeline

PublishedApr 24

Latest updateMay 13

Description

Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite (subcomponent: Primavera Desktop Integration). Supported versions that are affected are 1.0, 1.1, 14.2, 15.1, 15.2, 16.1 and 16.2. Easily "exploitable" vulnerability allows high privileged attacker with network access via HTTP to compromise Primavera Gateway. While the vulnerability is in Primavera Gateway, attacks may significantly impact additional products. Successful attacks of this vulnerability can result i…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:HExploitability: 2.3 | Impact: 5.8

Affected Packages2 packages

▶NVDoracle/primavera_gateway7 versions+6

▶CVEListV5oracle_corporation/primavera_gateway7 versions+6

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-vpmv-grmc-jrp8: Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite (subcomponent: Primavera Desktop Integration)↗2022-05-13

▶

CVEList

CVE-2017-3500: Vulnerability in the Primavera Gateway component of Oracle Primavera Products Suite (subcomponent: Primavera Desktop Integration)↗2017-04-24

▶

💥Exploits & PoCs

Exploit-DB

Sync Breeze Enterprise 9.5.16 - 'Import Command' Buffer Overflow (Metasploit)↗2018-01-24

▶

Exploit-DB

Viap Automation WinPLC7 5.0.45.5921 - Recv Buffer Overflow (Metasploit)↗2017-09-13

▶