Oracle Primavera Portfolio Management — known CVE vulnerabilities

Every CVE whose affected-product data names Oracle Primavera Portfolio Management, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (14)

• CVE-2020-2562 — CVSS 6.1 (medium): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Investor Module). Supported…
• CVE-2020-14528 — CVSS 6.1 (medium): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported…
• CVE-2022-21269 — CVSS 6.1 (medium): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported…
• CVE-2019-10219 — CVSS 6.1 (medium): A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of…
• CVE-2020-14527 — CVSS 5.9 (medium): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported…
• CVE-2020-14549 — CVSS 5.9 (medium): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Server). Supported…
• CVE-2022-21377 — CVSS 5.4 (medium): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web API). Supported versions…
• CVE-2020-14529 — CVSS 5.4 (medium): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Investor Module). Supported…
• CVE-2022-21242 — CVSS 5.4 (medium): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported…
• CVE-2022-21376 — CVSS 5.4 (medium): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported…
• CVE-2022-21281 — CVSS 4.8 (medium): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported…
• CVE-2022-21243 — CVSS 4.3 (medium): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported…
• CVE-2020-14566 — CVSS 4.3 (medium): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported…
• CVE-2022-21244 — CVSS 4.3 (medium): Vulnerability in the Primavera Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported…