Known vulnerabilities in Primavera Unifier - page 4

Vendor: Oracle
Software: Primavera Unifier
Software CPE: cpe:2.3:a:oracle:primavera_unifier:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 94
Public exploits: 13
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Primavera Unifier Primavera Unifier is affected by 94 known vulnerabilities: 2 critical, 15 high, 54 medium, 23 low Critical High Medium Low

Vulnerabilities (94)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU49740 - Improper input validation
CVE-2020-25020		 CWE-20 High
No
No
 - 20.01.2021 SB2021012017
SB2023111637
SB2025011715
#VU28624 - Improper input validation
CVE-2019-14379		 CWE-20 High
No
No
 - 04.06.2020 SB2019101525
SB2019101568
SB2019101569
and 6 more
#VU27924 - Incorrect Default Permissions
CVE-2020-1945		 CWE-276 Low
No
No
 - 15.05.2020 SB2020051501
SB2020052114
SB2020060205
and 48 more
#VU47428 - Permissions, Privileges, and Access Controls
CVE-2020-11979		 CWE-264 Low
No
No
 - 14.05.2020 SB2020100804
SB2020100815
SB2020111614
and 51 more
#VU27487 - Improper Certificate Validation
CVE-2020-9488		 CWE-295 Low
No
No
 - 04.05.2020 SB2020050406
SB2020071606
SB2020071620
and 67 more
#VU34420 - Missing release of memory after effective lifetime
CVE-2020-9489		 CWE-401 Medium
No
No
 - 27.04.2020 SB2020042727
SB2020102706
SB2020102845
and 2 more
#VU25830 - Deserialization of Untrusted Data
CVE-2020-9546		 CWE-502 High
No
No
 - 09.03.2020 SB2020030909
SB2020071523
SB2020071620
and 31 more
#VU24494 - Improper input validation
CVE-2019-10088		 CWE-20 High
No
No
 - 22.01.2020 SB2020012309
SB2020042111
SB2020041458
and 1 more
#VU24468 - Improper input validation
CVE-2019-0227		 CWE-20 Medium
Available
No
 - 21.01.2020 SB2020012205
SB2020012308
SB2020012309
and 40 more
#VU23850 - Improper Control of Generation of Code ('Code Injection')
CVE-2019-17558		 CWE-94 Medium
Available
Exploited
 - 30.12.2019 SB2019123002
SB2020102845
#VU22545 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-12415		 CWE-611 High
No
No
 - 06.11.2019 SB2019110635
SB2020012308
SB2020012309
and 42 more
#VU21593 - Improper input validation
CVE-2019-16943		 CWE-20 Medium
No
No
 - 07.10.2019 SB2019100711
SB2019100716
SB2019120206
and 34 more
#VU21135 - Exposure of sensitive information to an unauthorized actor
CVE-2019-14540		 CWE-200 Medium
Available
No
 - 16.09.2019 SB2019091616
SB2019100716
SB2019102422
and 23 more
#VU19595 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2019-13990		 CWE-611 Medium
No
No
 - 01.08.2019 SB2019080104
SB2020042114
SB2020042350
and 26 more
#VU19218 - Improper Access Control
CVE-2018-17196		 CWE-284 Medium
No
No
 - 17.07.2019 SB2019071706
SB2020071632
SB2020102845
and 4 more
#VU18092 - Improperly Controlled Modification of Object Prototype Attributes (\'Prototype Pollution\')
CVE-2019-11358		 CWE-1321 Low
Available
No
 - 28.03.2019 SB2019032804
SB2019041026
SB2019041801
and 155 more
#VU14150 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2015-9251		 CWE-79 Low
No
No
 - 31.07.2018 SB2018080106
SB2019011705
SB2019100301
and 63 more
#VU12842 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2017-12626		 CWE-835 Low
No
No
 - 18.05.2018 SB2018050312
SB2020011463
SB2020011481
and 24 more
#VU31399 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2017-9096		 CWE-611 High
No
No
 - 08.11.2017 SB2017110815
SB2020102845
SB2023042118
and 3 more
#VU735 - Improper Restriction of XML External Entity Reference ('XXE')
CVE-2015-1832		 CWE-611 Low
No
No
 - 04.10.2016 SB2015071704
SB2020042337
SB2020102845
and 6 more


Showing elements 61 - 80 out of 94