Oracle Corporation Primavera P6 Enterprise Project Portfolio Management

Name: Oracle Corporation Primavera P6 Enterprise Project Portfolio Management
Brand: Oracle Corporation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

2critical2high21medium0low

updated 2026-10-28

vulnerabilities (30)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-10046US	medium5.4	3.92% (90th)	Exploit	no fix	2017-08-08	5 versions
CVE-2017-3583US	high8.1	2.08% (81st)	—	no fix	2017-04-24	6 versions
CVE-2017-3503US	critical9.9	2.06% (81st)	—	no fix	2017-04-24	6 versions
CVE-2017-10038US	medium6.5	1.87% (79th)	—	no fix	2017-08-08	4 versions
CVE-2019-3020US	critical9.3	1.52% (74th)	—	no fix	2019-10-16	4 versions
CVE-2017-10160US	medium4.3	1.42% (73rd)	—	no fix	2017-08-08	6 versions
CVE-2017-3579US	medium6.1	1.36% (71st)	—	no fix	2017-04-24	6 versions
CVE-2018-2849US	high7.7	1.33% (71st)	—	no fix	2018-04-19	2 versions
CVE-2018-3281US	medium6.1	1.15% (67th)	—	no fix	2018-10-17	7 versions
CVE-2018-3241US	medium6.1	1.15% (67th)	—	no fix	2018-10-17	7 versions
CVE-2020-14706US	medium5.9	1.13% (66th)	—	no fix	2020-07-15	3 versions
CVE-2019-2976US	medium6.8	1.13% (66th)	—	no fix	2019-10-16	≤ 17.1.0-17.12.12
CVE-2018-2961US	medium6.1	1.10% (65th)	—	no fix	2018-07-18	4 versions
CVE-2018-2960US	medium6.1	1.10% (65th)	—	no fix	2018-07-18	4 versions
CVE-2018-2963US	medium4.3	1.07% (65th)	—	no fix	2018-07-18	3 versions
CVE-2017-10131US	medium6.5	1.03% (63rd)	—	no fix	2017-08-08	6 versions
CVE-2019-2512US	medium4.7	1.02% (63rd)	—	no fix	2019-01-16	7 versions
CVE-2019-2701US	medium4.3	0.96% (61st)	—	no fix	2019-04-23	≤ 18.8
CVE-2020-2706US	medium5.4	0.91% (60th)	—	no fix	2020-04-15	5 versions
CVE-2020-14653US	medium5.4	0.77% (55th)	—	no fix	2020-07-15	3 versions
CVE-2020-2707US	medium5.4	0.74% (54th)	—	no fix	2020-01-15	5 versions
CVE-2020-2594US	medium6.5	0.71% (53rd)	—	no fix	2020-04-15	5 versions
CVE-2018-2962US	medium4.4	0.71% (53rd)	—	no fix	2018-07-18	4 versions
CVE-2021-2386US	medium4.0	0.66% (51st)	—	no fix	2021-07-21	≤ 20.12.0-20.12.3
CVE-2021-2366US	medium5.5	0.56% (46th)	—	no fix	2021-07-21	4 versions
CVE-2024-21095US	—	0.53% (44th)	—	no fix	2024-04-16	5 versions
CVE-2025-21558US	—OT elevated	0.26% (18th)	—	no fix	2025-01-21	3 versions
CVE-2025-50061US	—	0.22% (13th)	—	no fix	2025-07-15	5 versions
CVE-2025-21528US	—	0.21% (12th)	—	no fix	2025-01-21	4 versions
CVE-2025-21526US	—	0.19% (9th)	—	no fix	2025-01-21	4 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-266Incorrect Privilege Assignment6 CVEs
CWE-284Improper Access Control6 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-264CWE-2642 CVEs
CWE-269Improper Privilege Management2 CVEs
CWE-287Improper Authentication2 CVEs
CWE-352Cross-Site Request Forgery (CSRF)2 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)30 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan