Oracle Primavera P6 Professional Project Management vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Oracle Primavera P6 Professional Project Management: 2 record(s), with affected versions and fixes.
cpe:2.3:a:oracle:primavera_p6_professional_project_management

CVE-2019-10219 Medium · 6.1 CWE-79 Nov 8, 2019

Cross-site Scripting (XSS) in Red Hat Hibernate Validator

A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.

CVE-2018-0734 Medium · 5.9 CWE-327 Oct 30, 2018

Timing attack against DSA

The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).