{"id":"CVE-2016-3572","aliases":["EUVD-2016-4598","GHSA-6qhq-hw98-g264"],"status":"published","title":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component...","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Access.","severity":{"version":"3.0","score":6.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01437,"percentile":0.73307,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2016-07-21T10:00:00Z","modified":"2026-06-17T00:45:58Z","products":[{"vendor":"oracle","product":"primavera_p6_enterprise_project_portfolio_management"}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpujul2016-2881720.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory"]},{"url":"http://www.securityfocus.com/bid/91787","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1036393","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://www.securityfocus.com/bid/91855","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-3572"},{"url":"https://github.com/advisories/GHSA-6qhq-hw98-g264"}],"sources":{"cve":[{"id":"CVE-2016-3572","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Access.","status":"published","published":"2016-07-21T10:00:00Z","modified":"2024-10-11T20:44:19.206Z","updated_at":"2026-11-02T14:33:34.094161Z"}],"euvd":[{"id":"EUVD-2016-4598","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Access.","status":"published","published":"2016-07-21T10:00:00Z","modified":"2024-10-11T20:44:19Z","updated_at":"2026-11-03T00:27:38.113358Z"}],"ghsa":[{"id":"GHSA-6qhq-hw98-g264","title":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component...","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Access.","status":"published","published":"2022-05-17T01:20:24Z","modified":"2023-02-03T05:03:54Z","cvss":[{"version":"3.0","score":6.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T14:53:26.852274Z"}],"nvd":[{"id":"CVE-2016-3572","description":"Unspecified vulnerability in the Primavera P6 Enterprise Project Portfolio Management component in Oracle Primavera Products Suite 8.3, 8.4, 15.1, 15.2, and 16.1 allows remote authenticated users to affect confidentiality and integrity via vectors related to Web Access.","status":"published","published":"2016-07-21T10:14:10.377Z","modified":"2026-06-17T00:45:58.913Z","cvss":[{"version":"3.0","score":6.4,"vector":"CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":5.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:27.736698Z"}]}}