Known vulnerabilities in Primavera P6 Enterprise Project Portfolio Management

Vendor: Oracle
Software: Primavera P6 Enterprise Project Portfolio Management
Software CPE: cpe:2.3:a:oracle:primavera_p6_enterprise_project_portfolio_management:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 52
Public exploits: 3
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Primavera P6 Enterprise Project Portfolio Management Primavera P6 Enterprise Project Portfolio Management is affected by 52 known vulnerabilities: 1 critical, 8 high, 30 medium, 13 low Critical High Medium Low

Vulnerabilities (52)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117439 - Improper input validation
CVE-2025-48795		 CWE-20 Low
No
No
 - 22.10.2025 SB2025102238
SB2025102279
SB2025102286
and 9 more
#VU112916 - Improper input validation
CVE-2025-50061		 CWE-20 Medium
No
No
 20.12.21.0 16.07.2025 SB2025071634
#VU112106 - Memory corruption
CVE-2025-52999		 CWE-119 Medium
No
No
 - 02.07.2025 SB2025070257
SB2025070261
SB2025070262
and 43 more
#VU111165 - Improper Access Control
CVE-2025-48734		 CWE-284 Medium
No
No
 - 16.06.2025 SB2025061643
SB2025061644
SB2025061645
and 141 more
#VU105783 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-26791		 CWE-79 Low
No
No
 - 17.03.2025 SB2025031740
SB2025031741
SB2025031771
and 35 more
#VU105715 - Out-of-bounds write
CVE-2025-27363		 CWE-787 Critical
Available
Exploited
 20.12.21.1 14.03.2025 SB2025031402
SB2025031502
SB2025031750
and 97 more
#VU105112 - Resource exhaustion
CVE-2025-23184		 CWE-400 Medium
No
No
 - 28.02.2025 SB2025022807
SB2025030340
SB2025041017
and 40 more
#VU103295 - Improper input validation
CVE-2025-21526		 CWE-20 Medium
No
No
 - 24.01.2025 SB2025012472
#VU103296 - Improper input validation
CVE-2025-21558		 CWE-20 Medium
No
No
 - 24.01.2025 SB2025012472
#VU103297 - Improper input validation
CVE-2025-21528		 CWE-20 Low
No
No
 - 24.01.2025 SB2025012472
#VU88578 - Improper input validation
CVE-2024-21095		 CWE-20 High
No
No
 - 16.04.2024 SB2024041645
#VU82276 - Allocation of Resources Without Limits or Throttling
CVE-2023-5072		 CWE-770 Medium
No
No
 - 20.10.2023 SB2023102017
SB2023102018
SB2023113056
and 97 more
#VU80788 - Resource exhaustion
CVE-2023-42503		 CWE-400 Medium
No
No
 - 14.09.2023 SB2023091434
SB2023111725
SB2023112014
and 30 more
#VU77107 - Incorrect Default Permissions
CVE-2023-2976		 CWE-276 Low
No
No
 - 08.06.2023 SB2023060849
SB2023071712
SB2023072512
and 157 more
#VU65639 - Out-of-bounds write
CVE-2022-27404		 CWE-787 High
No
No
 - 21.07.2022 SB2022072115
SB2022072116
SB2022072122
and 48 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU55166 - Improper input validation
CVE-2021-2366		 CWE-20 Medium
No
No
 - 21.07.2021 SB2021072143
#VU55167 - Improper input validation
CVE-2021-2386		 CWE-20 Low
No
No
 - 21.07.2021 SB2021072143
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more


Showing elements 1 - 20 out of 52