Primavera P6 Enterprise Project Portfolio Management
This issue affects the Web Access component of Oracle Primavera P6 Enterprise Project Portfolio Management. A low-privileged attacker with network access via HTTP can compromise the application, requiring human interaction from a person other than the attacker. Successful exploitation may lead to unauthorized data modification, insertion, deletion, or read access. Attacks may potentially impact additional products.