CVE-2016-3572

medium

Published 2016-07-21 · Modified 2026-05-06

CVSS v3

6.4

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N

CVSS v2

5.5

VIR risk

6.4

Description

Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Access.

Predictions

Exploit likelihood

74%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: secalert_us@oracle.com — http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html

Application impact

Vendor	Product	Versions
oracle	primavera_p6_enterprise_project_portfolio_management	`8.3`
oracle	primavera_p6_enterprise_project_portfolio_management	`8.4`
oracle	primavera_p6_enterprise_project_portfolio_management	`15.1`
oracle	primavera_p6_enterprise_project_portfolio_management	`15.2`
oracle	primavera_p6_enterprise_project_portfolio_management	`16.1`

References

Verify integrity in audit chain (admin only). AS-IS.