CVE Intelligence

Vulnerabilidades do Oracle Primavera P6 Professional Project Management

🔔 Criar alerta RSS Verificador de versão

CVEs publicadas que afetam Oracle Primavera P6 Professional Project Management: 2 registro(s), com versões afetadas e correções.
cpe:2.3:a:oracle:primavera_p6_professional_project_management

CVE-2019-10219 Média · 6.1 CWE-79 08/11/2019
Cross-site Scripting (XSS) em Red Hat Hibernate Validator
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
CVE-2018-0734 Média · 5.9 CWE-327 30/10/2018
Timing attack against DSA
The OpenSSL DSA signature algorithm has been shown to be vulnerable to a timing side channel attack. An attacker could use variations in the signing algorithm to recover the private key. Fixed in OpenSSL 1.1.1a (Affected 1.1.1). Fixed in OpenSSL 1.1.0j (Affected 1.1.0-1.1.0i). Fixed in OpenSSL 1.0.2q (Affected 1.0.2-1.0.2p).