Known vulnerabilities in Primavera Unifier - page 3

Vendor: Oracle
Software: Primavera Unifier
Software CPE: cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 94
Public exploits: 13
Known exploited (KEV): 4

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Primavera Unifier Primavera Unifier is affected by 94 known vulnerabilities: 2 critical, 15 high, 54 medium, 23 low Critical High Medium Low

Vulnerabilities (94)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU63479 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-23457		 CWE-22 High
No
No
 - 20.05.2022 SB2022052008
SB2022052009
SB2022052010
and 11 more
#VU63404 - Incorrect Regular Expression
CVE-2022-30126		 CWE-185 Medium
No
No
 - 18.05.2022 SB2022051837
SB2022062703
SB2022062804
and 11 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU60834 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-23450		 CWE-94 High
No
No
 - 23.02.2022 SB2022022311
SB2022022312
SB2022031011
and 42 more
#VU59965 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-23437		 CWE-835 Medium
No
No
 - 25.01.2022 SB2022012503
SB2022041946
SB2022042249
and 92 more
#VU59936 - Improper input validation
CVE-2021-42575		 CWE-20 High
No
No
 - 23.01.2022 SB2022012333
SB2022072039
SB2022071971
and 5 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Available
No
 - 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU58176 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-37714		 CWE-835 Medium
No
No
 - 16.11.2021 SB2021111606
SB2021111715
SB2022012314
and 24 more
#VU56790 - Information Exposure Through Timing Discrepancy
CVE-2021-38153		 CWE-208 Low
No
No
 - 21.09.2021 SB2021092116
SB2022010906
SB2022012104
and 21 more
#VU55044 - Improper input validation
CVE-2021-2351		 CWE-20 High
No
No
 - 20.07.2021 SB2021072053
SB2022011824
SB2022011825
and 110 more
#VU54856 - Resource exhaustion
CVE-2021-36374		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071409
SB2021072011
SB2021101927
and 44 more
#VU54853 - Resource exhaustion
CVE-2021-36090		 CWE-400 Medium
No
No
 - 14.07.2021 SB2021071408
SB2021080809
SB2021100411
and 70 more
#VU53202 - Command injection
CVE-2021-23337		 CWE-77 Medium
No
No
 - 12.05.2021 SB2021021525
SB2021051230
SB2021062703
and 61 more
#VU52252 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2021-29425		 CWE-22 Low
No
No
 - 15.04.2021 SB2021041510
SB2021081922
SB2021093016
and 122 more
#VU51796 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2021-28657		 CWE-835 Medium
No
No
 - 30.03.2021 SB2021033021
SB2022042284
SB2021062232
and 4 more
#VU50000 - Permissions, Privileges, and Access Controls
CVE-2020-9492		 CWE-264 Medium
No
No
 - 26.01.2021 SB2021012612
SB2021120219
SB2021120336
and 12 more
#VU50139 - Incorrect Default Permissions
CVE-2020-8908		 CWE-276 Low
No
No
 - 11.12.2020 SB2020121114
SB2021031707
SB2021042104
and 62 more
#VU48979 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2020-25649		 CWE-611 Medium
No
No
 - 03.12.2020 SB2020121510
SB2021020321
SB2021042112
and 68 more
#VU30113 - Improper input validation
CVE-2020-5258		 CWE-20 Low
No
No
 - 16.07.2020 SB2020071699
SB2021072124
SB2021072134
and 17 more


Showing elements 41 - 60 out of 94