[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fOrgXEmK8gUEtORvtS0HGiiw1l6hXT7eX3xbsLwnbdd8":3,"g5a-family:oracle\u002Fprimavera_gateway":234,"g5a-ex:oracle\u002Fprimavera_gateway@*":235},{"success":4,"data":5},true,{"product":6,"versions":105,"topVulnerabilitiesByEpss":146,"kevVulnerabilities":206,"seoMetadata":212,"meta":231},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":104},"oracle","primavera_gateway",40,59,1,"2023-01-18",[14,19,21,23,25,28,30,33,36,38,41,43,46,48,50,52,55,57,59,61,63,65,67,69,71,73,75,77,79,81,83,85,87,89,91,94,96,98,100,102],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"1.0",2,0,false,{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},"1.1",{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},"14.2",{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},"15.1",{"version":26,"cve_count":27,"kev_count":17,"has_kev":18},"15.2",13,{"version":29,"cve_count":16,"kev_count":17,"has_kev":18},"15.2.18",{"version":31,"cve_count":32,"kev_count":17,"has_kev":18},"16.1",6,{"version":34,"cve_count":35,"kev_count":17,"has_kev":18},"16.2",15,{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},"16.2.0",{"version":39,"cve_count":40,"kev_count":17,"has_kev":18},"16.2.11",3,{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},"17.1",{"version":44,"cve_count":45,"kev_count":17,"has_kev":18},"17.12",9,{"version":47,"cve_count":17,"kev_count":17,"has_kev":18},"17.12.0",{"version":49,"cve_count":17,"kev_count":17,"has_kev":18},"17.12.10",{"version":51,"cve_count":17,"kev_count":17,"has_kev":18},"17.12.11",{"version":53,"cve_count":54,"kev_count":17,"has_kev":18},"17.12.6",4,{"version":56,"cve_count":17,"kev_count":17,"has_kev":18},"17.12.7",{"version":58,"cve_count":17,"kev_count":17,"has_kev":18},"17.12.8",{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},"17.12.9",{"version":62,"cve_count":17,"kev_count":17,"has_kev":18},"17.7",{"version":64,"cve_count":32,"kev_count":17,"has_kev":18},"18.8.0",{"version":66,"cve_count":17,"kev_count":17,"has_kev":18},"18.8.11",{"version":68,"cve_count":17,"kev_count":17,"has_kev":18},"18.8.12",{"version":70,"cve_count":17,"kev_count":17,"has_kev":18},"18.8.13",{"version":72,"cve_count":17,"kev_count":17,"has_kev":18},"18.8.15",{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},"18.8.8",{"version":76,"cve_count":16,"kev_count":17,"has_kev":18},"18.8.8.1",{"version":78,"cve_count":17,"kev_count":17,"has_kev":18},"18.8.9",{"version":80,"cve_count":32,"kev_count":17,"has_kev":18},"19.12.0",{"version":82,"cve_count":17,"kev_count":17,"has_kev":18},"19.12.10",{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},"19.12.11",{"version":86,"cve_count":17,"kev_count":17,"has_kev":18},"19.12.12",{"version":88,"cve_count":17,"kev_count":17,"has_kev":18},"19.12.15",{"version":90,"cve_count":17,"kev_count":17,"has_kev":18},"19.12.4",{"version":92,"cve_count":93,"kev_count":17,"has_kev":18},"20.12.0",14,{"version":95,"cve_count":17,"kev_count":17,"has_kev":18},"20.12.10",{"version":97,"cve_count":17,"kev_count":17,"has_kev":18},"20.12.7",{"version":99,"cve_count":17,"kev_count":17,"has_kev":18},"20.12.8",{"version":101,"cve_count":54,"kev_count":17,"has_kev":18},"21.12.0",{"version":103,"cve_count":17,"kev_count":17,"has_kev":18},"21.12.8","Primavera Gateway by Oracle is a technology product with 40 tracked versions and 59 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":16,"kev_count":17,"has_kev":18},{"version":22,"cve_count":16,"kev_count":17,"has_kev":18},{"version":24,"cve_count":16,"kev_count":17,"has_kev":18},{"version":26,"cve_count":27,"kev_count":17,"has_kev":18},{"version":29,"cve_count":16,"kev_count":17,"has_kev":18},{"version":31,"cve_count":32,"kev_count":17,"has_kev":18},{"version":34,"cve_count":35,"kev_count":17,"has_kev":18},{"version":37,"cve_count":17,"kev_count":17,"has_kev":18},{"version":39,"cve_count":40,"kev_count":17,"has_kev":18},{"version":42,"cve_count":17,"kev_count":17,"has_kev":18},{"version":44,"cve_count":45,"kev_count":17,"has_kev":18},{"version":47,"cve_count":17,"kev_count":17,"has_kev":18},{"version":49,"cve_count":17,"kev_count":17,"has_kev":18},{"version":51,"cve_count":17,"kev_count":17,"has_kev":18},{"version":53,"cve_count":54,"kev_count":17,"has_kev":18},{"version":56,"cve_count":17,"kev_count":17,"has_kev":18},{"version":58,"cve_count":17,"kev_count":17,"has_kev":18},{"version":60,"cve_count":17,"kev_count":17,"has_kev":18},{"version":62,"cve_count":17,"kev_count":17,"has_kev":18},{"version":64,"cve_count":32,"kev_count":17,"has_kev":18},{"version":66,"cve_count":17,"kev_count":17,"has_kev":18},{"version":68,"cve_count":17,"kev_count":17,"has_kev":18},{"version":70,"cve_count":17,"kev_count":17,"has_kev":18},{"version":72,"cve_count":17,"kev_count":17,"has_kev":18},{"version":74,"cve_count":17,"kev_count":17,"has_kev":18},{"version":76,"cve_count":16,"kev_count":17,"has_kev":18},{"version":78,"cve_count":17,"kev_count":17,"has_kev":18},{"version":80,"cve_count":32,"kev_count":17,"has_kev":18},{"version":82,"cve_count":17,"kev_count":17,"has_kev":18},{"version":84,"cve_count":17,"kev_count":17,"has_kev":18},{"version":86,"cve_count":17,"kev_count":17,"has_kev":18},{"version":88,"cve_count":17,"kev_count":17,"has_kev":18},{"version":90,"cve_count":17,"kev_count":17,"has_kev":18},{"version":92,"cve_count":93,"kev_count":17,"has_kev":18},{"version":95,"cve_count":17,"kev_count":17,"has_kev":18},{"version":97,"cve_count":17,"kev_count":17,"has_kev":18},{"version":99,"cve_count":17,"kev_count":17,"has_kev":18},{"version":101,"cve_count":54,"kev_count":17,"has_kev":18},{"version":103,"cve_count":17,"kev_count":17,"has_kev":18},[147,155,161,168,175,181,187,192,197,202],{"cveId":148,"description":149,"publishedDate":150,"cvssScore":151,"cvssVersion":152,"severity":153,"isKev":18,"epssScore":154},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","2021-12-18",5.9,"v3.1","Medium",0.99999,{"cveId":156,"description":157,"publishedDate":158,"cvssScore":159,"cvssVersion":152,"severity":153,"isKev":18,"epssScore":160},"CVE-2021-44832","Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI data source names to the java protocol in Log4j2 versions 2.17.1, 2.12.4, and 2.3.2.","2021-12-28",6.6,0.97906,{"cveId":162,"description":163,"publishedDate":164,"cvssScore":165,"cvssVersion":152,"severity":166,"isKev":18,"epssScore":167},"CVE-2019-0227","A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.","2019-05-01",7.5,"High",0.9194,{"cveId":169,"description":170,"publishedDate":171,"cvssScore":172,"cvssVersion":152,"severity":173,"isKev":18,"epssScore":174},"CVE-2017-5645","In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.","2017-04-17",9.8,"Critical",0.89792,{"cveId":176,"description":177,"publishedDate":178,"cvssScore":179,"cvssVersion":152,"severity":153,"isKev":18,"epssScore":180},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",6.1,0.8682,{"cveId":182,"description":183,"publishedDate":184,"cvssScore":185,"cvssVersion":152,"severity":153,"isKev":4,"epssScore":186},"CVE-2020-11023","In jQuery versions greater than or equal to 1.0.3 and before 3.5.0, passing HTML containing \u003Coption> elements from untrusted sources - even after sanitizing it - to one of jQuery's DOM manipulation methods (i.e. .html(), .append(), and others) may execute untrusted code. This problem is patched in jQuery 3.5.0.","2020-04-29",6.9,0.84887,{"cveId":188,"description":189,"publishedDate":190,"cvssScore":172,"cvssVersion":152,"severity":173,"isKev":18,"epssScore":191},"CVE-2018-1270","Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack.","2018-04-06",0.77476,{"cveId":193,"description":194,"publishedDate":195,"cvssScore":172,"cvssVersion":152,"severity":173,"isKev":18,"epssScore":196},"CVE-2019-17571","Included in Log4j 1.2 is a SocketServer class that is vulnerable to deserialization of untrusted data which can be exploited to remotely execute arbitrary code when combined with a deserialization gadget when listening to untrusted network traffic for log data. This affects Log4j versions up to 1.2 up to 1.2.17.","2019-12-20",0.6998,{"cveId":198,"description":199,"publishedDate":200,"cvssScore":172,"cvssVersion":152,"severity":173,"isKev":18,"epssScore":201},"CVE-2018-1275","Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.16 and older unsupported versions, allow applications to expose STOMP over WebSocket endpoints with a simple, in-memory STOMP broker through the spring-messaging module. A malicious user (or attacker) can craft a message to the broker that can lead to a remote code execution attack. This CVE addresses the partial fix for CVE-2018-1270 in the 4.3.x branch of the Spring Framework.","2018-04-11",0.57414,{"cveId":203,"description":204,"publishedDate":190,"cvssScore":151,"cvssVersion":152,"severity":153,"isKev":18,"epssScore":205},"CVE-2018-1271","Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources (e.g. CSS, JS, images). When static resources are served from a file system on Windows (as opposed to the classpath, or the ServletContext), a malicious user can send a request using a specially crafted URL that can lead a directory traversal attack.",0.34444,[207],{"cveId":182,"description":183,"publishedDate":184,"cvssScore":185,"severity":153,"isKev":4,"epssScore":186,"cisaVulnName":208,"cisaDateAdded":209,"cisaShortDescription":210,"cisaRequiredAction":211},"JQuery Cross-Site Scripting (XSS) Vulnerability","2025-01-23","JQuery contains a persistent cross-site scripting (XSS) vulnerability. When passing maliciously formed, untrusted input enclosed in HTML tags, JQuery's DOM manipulators can execute untrusted code in the context of the user's browser.","Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.",{"title":213,"metaDescription":214,"keywords":215,"structuredData":216},"Primavera Gateway by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Primavera Gateway by Oracle covering 40 versions with 59 tracked vulnerabilities and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Primavera Gateway vulnerabilities, Primavera Gateway security, Primavera Gateway CVE, Oracle Primavera Gateway, Primavera Gateway threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Primavera Gateway KEV, Primavera Gateway exploited vulnerabilities",{"@context":217,"@type":218,"name":219,"description":214,"url":220,"manufacturer":221,"applicationCategory":225,"softwareVersion":226,"mainEntity":227},"https:\u002F\u002Fschema.org","SoftwareApplication","Primavera Gateway","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fprimavera_gateway",{"@type":222,"name":223,"url":224},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","40 versions tracked",{"@type":228,"name":229,"description":230,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Primavera Gateway Security Vulnerabilities","Security vulnerabilities affecting Primavera Gateway by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":232,"apiVersion":233},"2026-10-17T12:49:16.793Z","3.0",[],{"rows":236,"total":11,"capped":18,"failed":17},[237],{"cveId":182,"name":208,"severity":153,"cvss":185,"added":209,"epss":186,"published":238,"ranges":239,"checked":4,"hits":244,"covers":18},"2020-04-29T21:15:11.743",[240,241,242,243],"16.2 to 16.2.11","17.12.0 to 17.12.7","18.8.0 to 18.8.9","19.12.0 to 19.12.4",[]]