Primavera Unifier vulnerabilities

Vulnerability in Primavera Unifier (component Core) affecting versions 21.12.0-21.12.17. A difficult-to-exploit network attack via HTTP by an unauthenticated attacker can lead to unauthorized creation, deletion or modification and access to critical data.

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Project Control). Affected versions are 23.12.0-23.12.16. An easily exploitable flaw allows a low privileged attacker with network access via HTTP to perform unauthorized creation, deletion or modification of critical data and read a subset of accessible data.

Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Logging). A low privileged attacker with network access via HTTP can easily exploit this vulnerability, resulting in unauthorized access to critical data or complete access to all Primavera Unifier accessible data.