CVE-2020-14549 is a difficult-to-exploit vulnerability in the Web Server component of Oracle Primavera Portfolio Management versions 16.1.0.0-16.1.5.1, 18.0.0.0-18.0.2.0, and 19.0.0.0. An unauthenticated attacker with network access via HTTPS could compromise the system, requiring human interaction. Successful attacks can lead to unauthorized access to critical data or complete access to all accessible data, as well as unauthorized modification of some data. With a CVSS v3.1 score of 5.9 (Medium), this vulnerability is not actively exploited, lacks public exploit code, and has garnered no community discussion or media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
>= 16.1.0.0, <= 16.1.5.1CPE matchmatch criteria | cpe:2.3:a:oracle:primavera_portfolio_management:*:*:*:*:*:*:*:* | ||
>= 18.0.0.0, <= 18.0.2.0CPE matchmatch criteria | cpe:2.3:a:oracle:primavera_portfolio_management:*:*:*:*:*:*:*:* | ||
19.0.0.0CPE matchmatch criteria | cpe:2.3:a:oracle:primavera_portfolio_management:19.0.0.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.2 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.