CVE-2018-2967

3 documents3 sources

Severity

5.3MEDIUM

EPSS

0.1%

top 75.65%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Corporation Primavera Unifier Oracle Primavera Unifier

Timeline

PublishedJul 18

Latest updateMay 13

Description

Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core). Supported versions that are affected are 16.x, 17.x and 18.x. Easily exploitable vulnerability allows physical access to compromise Primavera Unifier. While the vulnerability is in Primavera Unifier, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Primavera Un…

CVSS vector

CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:NExploitability: 0.9 | Impact: 4.0

Affected Packages2 packages

▶NVDoracle/primavera_unifier23 versions+22

▶CVEListV5oracle_corporation/primavera_unifier16.x, 17.x, 18.x+2

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-gp3p-g3f7-7r84: Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core)↗2022-05-13

▶

CVEList

CVE-2018-2967: Vulnerability in the Primavera Unifier component of Oracle Construction and Engineering Suite (subcomponent: Core)↗2018-07-18

▶