Oracle Corp. Primavera P6 Enterprise Project Portfolio Management

Name: Oracle Corp. Primavera P6 Enterprise Project Portfolio Management
Brand: Oracle Corp.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

5critical4high17medium0low

updated 2026-10-27

vulnerabilities (31)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2020-36518US	high7.5	4.86% (92nd)	Exploit	no fix	2022-03-11	3 versions
CVE-2018-5407US	medium4.7	3.42% (89th)	Exploit	no fix	2018-11-15	7 versions
CVE-2018-0732US	high7.5	47.0% (99th)	—	no fix	2018-06-12	7 versions
CVE-2017-3738US	medium5.9	13.4% (96th)	—	no fix	2017-12-07	7 versions
CVE-2018-0734US	medium5.9OT elevated	12.2% (96th)	—	no fix	2018-10-30	7 versions
CVE-2018-19362US	critical9.8	10.6% (96th)	—	no fix	2019-01-02	6 versions
CVE-2018-19361US	critical9.8	10.6% (96th)	—	no fix	2019-01-02	6 versions
CVE-2018-19360US	critical9.8	10.6% (96th)	—	no fix	2019-01-02	6 versions
CVE-2020-10683US	critical9.8	7.27% (94th)	—	no fix	2020-05-01	4 versions
CVE-2018-17196US	high8.8	5.48% (93rd)	—	no fix	2019-07-11	19.12.0 → 19.12.6
CVE-2018-0735US	medium5.9OT elevated	4.72% (92nd)	—	no fix	2018-10-29	7 versions
CVE-2018-11039US	medium5.9	2.77% (86th)	—	no fix	2018-06-25	≤ 18.8
CVE-2019-17091US	medium6.1	2.47% (84th)	—	no fix	2019-10-02	5 versions
CVE-2019-3020US	critical9.3	1.52% (74th)	—	no fix	2019-10-16	4 versions
CVE-2018-3281US	medium6.1	1.15% (67th)	—	no fix	2018-10-17	7 versions
CVE-2018-3241US	medium6.1	1.15% (67th)	—	no fix	2018-10-17	7 versions
CVE-2020-14706US	medium5.9	1.13% (66th)	—	no fix	2020-07-15	3 versions
CVE-2019-2976US	medium6.8	1.13% (66th)	—	no fix	2019-10-16	17.1.0 → 17.12.12
CVE-2019-2512US	medium4.7	1.02% (63rd)	—	no fix	2019-01-16	7 versions
CVE-2020-2706US	medium5.4	0.91% (60th)	—	no fix	2020-04-15	5 versions
CVE-2020-14653US	medium5.4	0.77% (55th)	—	no fix	2020-07-15	3 versions
CVE-2020-2707US	medium5.4	0.74% (54th)	—	no fix	2020-01-15	5 versions
CVE-2020-2594US	medium6.5	0.71% (53rd)	—	no fix	2020-04-15	5 versions
CVE-2021-2386US	medium4.0	0.66% (51st)	—	no fix	2021-07-21	20.12.0 → 20.12.3
CVE-2021-2366US	medium5.5	0.56% (46th)	—	no fix	2021-07-21	4 versions
CVE-2024-21095US	—	0.53% (44th)	—	no fix	2024-04-16	5 versions
CVE-2020-2556US	high7.3	0.43% (37th)	—	no fix	2020-01-15	5 versions
CVE-2025-21558US	—OT elevated	0.26% (18th)	—	no fix	2025-01-21	3 versions
CVE-2025-50061US	—	0.22% (13th)	—	no fix	2025-07-15	5 versions
CVE-2025-21528US	—	0.21% (12th)	—	no fix	2025-01-21	4 versions
CVE-2025-21526US	—	0.19% (9th)	—	no fix	2025-01-21	4 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation7 CVEs
CWE-284Improper Access Control6 CVEs
CWE-264CWE-2644 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor3 CVEs
CWE-320CWE-3203 CVEs
CWE-502Deserialization of Untrusted Data3 CVEs
CWE-327Use of a Broken or Risky Cryptographic Algorithm2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)31 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan