[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fNjmFLRc-SDAjSztCJcplcAh0qPjdw7fnLM7AixrRTkI":3,"g5a-ex:oracle\u002Fprimavera_unifier@*":245,"g5a-family:oracle\u002Fprimavera_unifier":252},{"success":4,"data":5},true,{"product":6,"versions":113,"topVulnerabilitiesByEpss":157,"kevVulnerabilities":217,"seoMetadata":223,"meta":242},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":112},"oracle","primavera_unifier",43,95,1,"2022-05-16",[14,19,22,24,26,29,31,33,36,38,40,42,44,47,49,51,53,55,58,60,62,64,66,68,70,72,74,76,78,80,82,84,86,88,91,93,95,97,100,103,105,108,110],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},"10.0",2,0,false,{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},"10.1",4,{"version":23,"cve_count":16,"kev_count":17,"has_kev":18},"10.2",{"version":25,"cve_count":11,"kev_count":17,"has_kev":18},"15.0",{"version":27,"cve_count":28,"kev_count":17,"has_kev":18},"15.1",5,{"version":30,"cve_count":28,"kev_count":17,"has_kev":18},"15.2",{"version":32,"cve_count":11,"kev_count":17,"has_kev":18},"16.0",{"version":34,"cve_count":35,"kev_count":11,"has_kev":4},"16.1",49,{"version":37,"cve_count":35,"kev_count":11,"has_kev":4},"16.2",{"version":39,"cve_count":28,"kev_count":17,"has_kev":18},"16.2.1.0",{"version":41,"cve_count":28,"kev_count":17,"has_kev":18},"16.2.4.0",{"version":43,"cve_count":11,"kev_count":17,"has_kev":18},"17.0",{"version":45,"cve_count":46,"kev_count":17,"has_kev":18},"17.1",3,{"version":48,"cve_count":21,"kev_count":17,"has_kev":18},"17.10",{"version":50,"cve_count":21,"kev_count":17,"has_kev":18},"17.11",{"version":52,"cve_count":21,"kev_count":17,"has_kev":18},"17.12",{"version":54,"cve_count":17,"kev_count":17,"has_kev":18},"17.12.4",{"version":56,"cve_count":57,"kev_count":17,"has_kev":18},"17.2",12,{"version":59,"cve_count":46,"kev_count":17,"has_kev":18},"17.3",{"version":61,"cve_count":46,"kev_count":17,"has_kev":18},"17.4",{"version":63,"cve_count":46,"kev_count":17,"has_kev":18},"17.5",{"version":65,"cve_count":46,"kev_count":17,"has_kev":18},"17.6",{"version":67,"cve_count":21,"kev_count":17,"has_kev":18},"17.7",{"version":69,"cve_count":21,"kev_count":17,"has_kev":18},"17.8",{"version":71,"cve_count":21,"kev_count":17,"has_kev":18},"17.9",{"version":73,"cve_count":11,"kev_count":17,"has_kev":18},"18.0",{"version":75,"cve_count":46,"kev_count":17,"has_kev":18},"18.1",{"version":77,"cve_count":46,"kev_count":17,"has_kev":18},"18.2",{"version":79,"cve_count":46,"kev_count":17,"has_kev":18},"18.3",{"version":81,"cve_count":46,"kev_count":17,"has_kev":18},"18.4",{"version":83,"cve_count":46,"kev_count":17,"has_kev":18},"18.5",{"version":85,"cve_count":46,"kev_count":17,"has_kev":18},"18.6",{"version":87,"cve_count":46,"kev_count":17,"has_kev":18},"18.7",{"version":89,"cve_count":90,"kev_count":11,"has_kev":4},"18.8",78,{"version":92,"cve_count":17,"kev_count":17,"has_kev":18},"18.8.2",{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},"18.8.3",{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},"18.8.4",{"version":98,"cve_count":99,"kev_count":11,"has_kev":4},"19.12",67,{"version":101,"cve_count":102,"kev_count":17,"has_kev":18},"20.12",45,{"version":104,"cve_count":17,"kev_count":17,"has_kev":18},"20.6",{"version":106,"cve_count":107,"kev_count":17,"has_kev":18},"21.12",17,{"version":109,"cve_count":46,"kev_count":17,"has_kev":18},"9.13",{"version":111,"cve_count":46,"kev_count":17,"has_kev":18},"9.14","Primavera Unifier by Oracle is a technology product with 43 tracked versions and 95 known security vulnerabilities including 1 CISA Known Exploited Vulnerability. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156],{"version":15,"cve_count":16,"kev_count":17,"has_kev":18},{"version":20,"cve_count":21,"kev_count":17,"has_kev":18},{"version":23,"cve_count":16,"kev_count":17,"has_kev":18},{"version":25,"cve_count":11,"kev_count":17,"has_kev":18},{"version":27,"cve_count":28,"kev_count":17,"has_kev":18},{"version":30,"cve_count":28,"kev_count":17,"has_kev":18},{"version":32,"cve_count":11,"kev_count":17,"has_kev":18},{"version":34,"cve_count":35,"kev_count":11,"has_kev":4},{"version":37,"cve_count":35,"kev_count":11,"has_kev":4},{"version":39,"cve_count":28,"kev_count":17,"has_kev":18},{"version":41,"cve_count":28,"kev_count":17,"has_kev":18},{"version":43,"cve_count":11,"kev_count":17,"has_kev":18},{"version":45,"cve_count":46,"kev_count":17,"has_kev":18},{"version":48,"cve_count":21,"kev_count":17,"has_kev":18},{"version":50,"cve_count":21,"kev_count":17,"has_kev":18},{"version":52,"cve_count":21,"kev_count":17,"has_kev":18},{"version":54,"cve_count":17,"kev_count":17,"has_kev":18},{"version":56,"cve_count":57,"kev_count":17,"has_kev":18},{"version":59,"cve_count":46,"kev_count":17,"has_kev":18},{"version":61,"cve_count":46,"kev_count":17,"has_kev":18},{"version":63,"cve_count":46,"kev_count":17,"has_kev":18},{"version":65,"cve_count":46,"kev_count":17,"has_kev":18},{"version":67,"cve_count":21,"kev_count":17,"has_kev":18},{"version":69,"cve_count":21,"kev_count":17,"has_kev":18},{"version":71,"cve_count":21,"kev_count":17,"has_kev":18},{"version":73,"cve_count":11,"kev_count":17,"has_kev":18},{"version":75,"cve_count":46,"kev_count":17,"has_kev":18},{"version":77,"cve_count":46,"kev_count":17,"has_kev":18},{"version":79,"cve_count":46,"kev_count":17,"has_kev":18},{"version":81,"cve_count":46,"kev_count":17,"has_kev":18},{"version":83,"cve_count":46,"kev_count":17,"has_kev":18},{"version":85,"cve_count":46,"kev_count":17,"has_kev":18},{"version":87,"cve_count":46,"kev_count":17,"has_kev":18},{"version":89,"cve_count":90,"kev_count":11,"has_kev":4},{"version":92,"cve_count":17,"kev_count":17,"has_kev":18},{"version":94,"cve_count":17,"kev_count":17,"has_kev":18},{"version":96,"cve_count":17,"kev_count":17,"has_kev":18},{"version":98,"cve_count":99,"kev_count":11,"has_kev":4},{"version":101,"cve_count":102,"kev_count":17,"has_kev":18},{"version":104,"cve_count":17,"kev_count":17,"has_kev":18},{"version":106,"cve_count":107,"kev_count":17,"has_kev":18},{"version":109,"cve_count":46,"kev_count":17,"has_kev":18},{"version":111,"cve_count":46,"kev_count":17,"has_kev":18},[158,166,173,179,184,190,195,201,205,212],{"cveId":159,"description":160,"publishedDate":161,"cvssScore":162,"cvssVersion":163,"severity":164,"isKev":18,"epssScore":165},"CVE-2021-45105","Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups. This allows an attacker with control over Thread Context Map data to cause a denial of service when a crafted string is interpreted. This issue was fixed in Log4j 2.17.0, 2.12.3, and 2.3.1.","2021-12-18",5.9,"v3.1","Medium",0.99999,{"cveId":167,"description":168,"publishedDate":169,"cvssScore":170,"cvssVersion":163,"severity":171,"isKev":4,"epssScore":172},"CVE-2019-17558","Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity\u002F` directory or as a parameter. A user defined configset could contain renderable, potentially malicious, templates. Parameter provided templates are disabled by default, but can be enabled by setting `params.resource.loader.enabled` by defining a response writer with that setting set to `true`. Defining a response writer requires configuration API access. Solr 8.4 removed the params resource loader entirely, and only enables the configset-provided template rendering when the configset is `trusted` (has been uploaded by an authenticated user).","2019-12-30",7.5,"High",0.98567,{"cveId":174,"description":175,"publishedDate":176,"cvssScore":177,"cvssVersion":163,"severity":164,"isKev":18,"epssScore":178},"CVE-2021-44832","Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when a configuration uses a JDBC Appender with a JNDI LDAP data source URI when an attacker has control of the target LDAP server. This issue is fixed by limiting JNDI data source names to the java protocol in Log4j2 versions 2.17.1, 2.12.4, and 2.3.2.","2021-12-28",6.6,0.97906,{"cveId":180,"description":181,"publishedDate":182,"cvssScore":170,"cvssVersion":163,"severity":171,"isKev":18,"epssScore":183},"CVE-2019-0227","A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.","2019-05-01",0.9194,{"cveId":185,"description":186,"publishedDate":187,"cvssScore":188,"cvssVersion":163,"severity":164,"isKev":18,"epssScore":189},"CVE-2019-11358","jQuery before 3.4.0, as used in Drupal, Backdrop CMS, and other products, mishandles jQuery.extend(true, {}, ...) because of Object.prototype pollution. If an unsanitized source object contained an enumerable __proto__ property, it could extend the native Object.prototype.","2019-04-20",6.1,0.8682,{"cveId":191,"description":192,"publishedDate":193,"cvssScore":162,"cvssVersion":163,"severity":164,"isKev":18,"epssScore":194},"CVE-2021-3449","An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms extension (where it was present in the initial ClientHello), but includes a signature_algorithms_cert extension then a NULL pointer dereference will result, leading to a crash and a denial of service attack. A server is only vulnerable if it has TLSv1.2 and renegotiation enabled (which is the default configuration). OpenSSL TLS clients are not impacted by this issue. All OpenSSL 1.1.1 versions are affected by this issue. Users of these versions should upgrade to OpenSSL 1.1.1k. OpenSSL 1.0.2 is not impacted by this issue. Fixed in OpenSSL 1.1.1k (Affected 1.1.1-1.1.1j).","2021-03-25",0.63542,{"cveId":196,"description":197,"publishedDate":198,"cvssScore":199,"cvssVersion":163,"severity":164,"isKev":18,"epssScore":200},"CVE-2021-41184","jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option is now treated as a CSS selector. A workaround is to not accept the value of the `of` option from untrusted sources.","2021-10-26",6.5,0.40768,{"cveId":202,"description":203,"publishedDate":198,"cvssScore":188,"cvssVersion":163,"severity":164,"isKev":18,"epssScore":204},"CVE-2021-41182","jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.",0.39361,{"cveId":206,"description":207,"publishedDate":208,"cvssScore":209,"cvssVersion":163,"severity":210,"isKev":18,"epssScore":211},"CVE-2017-7525","A deserialization flaw was discovered in the jackson-databind, versions before 2.6.7.1, 2.7.9.1 and 2.8.9, which could allow an unauthenticated user to perform code execution by sending the maliciously crafted input to the readValue method of the ObjectMapper.","2018-02-06",9.8,"Critical",0.37721,{"cveId":213,"description":214,"publishedDate":215,"cvssScore":209,"cvssVersion":163,"severity":210,"isKev":18,"epssScore":216},"CVE-2021-23450","All versions of package dojo are vulnerable to Prototype Pollution via the setObject function.","2021-12-17",0.30367,[218],{"cveId":167,"description":168,"publishedDate":169,"cvssScore":170,"severity":171,"isKev":4,"epssScore":172,"cisaVulnName":219,"cisaDateAdded":220,"cisaShortDescription":221,"cisaRequiredAction":222},"Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Vulnerability","2021-11-03","The Apache Solr VelocityResponseWriter plug-in contains an unspecified vulnerability which can allow for remote code execution.","Apply updates per vendor instructions.",{"title":224,"metaDescription":225,"keywords":226,"structuredData":227},"Primavera Unifier by Oracle - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Primavera Unifier by Oracle covering 43 versions with 95 tracked vulnerabilities including 0 critical and 1 high-severity issues and 1 CISA KEV vulnerability. Real-time threat intelligence, CVE tracking, and security recommendations.","Primavera Unifier vulnerabilities, Primavera Unifier security, Primavera Unifier CVE, Oracle Primavera Unifier, Primavera Unifier threat intelligence, Oracle security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking, Primavera Unifier KEV, Primavera Unifier exploited vulnerabilities",{"@context":228,"@type":229,"name":230,"description":225,"url":231,"manufacturer":232,"applicationCategory":236,"softwareVersion":237,"mainEntity":238},"https:\u002F\u002Fschema.org","SoftwareApplication","Primavera Unifier","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Foracle\u002Fprimavera_unifier",{"@type":233,"name":234,"url":235},"Organization","Oracle","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Foracle","Security Software","43 versions tracked",{"@type":239,"name":240,"description":241,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Primavera Unifier Security Vulnerabilities","Security vulnerabilities affecting Primavera Unifier by Oracle",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":243,"apiVersion":244},"2026-10-17T12:43:16.214Z","3.0",{"rows":246,"total":11,"capped":18,"failed":17},[247],{"cveId":167,"name":219,"severity":171,"cvss":170,"added":220,"epss":172,"published":248,"ranges":249,"checked":4,"hits":251,"covers":18},"2019-12-30T17:15:19.78",[34,37,250,89,98],"17.7 to 17.12",[],[]]