Oracle Primavera Unifier up to 19.12.16/20.12.16/21.12.17/22.12.11 Platform denial of service

Summaryinfo

A vulnerability labeled as problematic has been found in Oracle Primavera Unifier up to 19.12.16/20.12.16/21.12.17/22.12.11. Impacted is an unknown function of the component Platform. The manipulation results in denial of service. This vulnerability was named CVE-2023-42503. The attack needs to be approached locally. There is no available exploit.

Detailsinfo

A vulnerability, which was classified as problematic, was found in Oracle Primavera Unifier up to 19.12.16/20.12.16/21.12.17/22.12.11 (Asset Management Software). Affected is an unknown part of the component Platform. The manipulation with an unknown input leads to a denial of service vulnerability. CWE is classifying the issue as CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. This is going to have an impact on availability.

The weakness was presented 01/16/2024 as Oracle Critical Patch Update Advisory - January 2024. The advisory is available at oracle.com. This vulnerability is traded as CVE-2023-42503. Successful exploitation requires user interaction by the victim. The technical details are unknown and an exploit is not available.

A possible mitigation has been published immediately after the disclosure of the vulnerability.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Type

• Asset Management Software

Vendor

• Oracle

Name

• Primavera Unifier

Version

• 19.12.0
• 19.12.1
• 19.12.2
• 19.12.3
• 19.12.4
• 19.12.5
• 19.12.6
• 19.12.7
• 19.12.8
• 19.12.9
• 19.12.10
• 19.12.11
• 19.12.12
• 19.12.13
• 19.12.14
• 19.12.15
• 19.12.16
• 20.12.0
• 20.12.1
• 20.12.2
• 20.12.3
• 20.12.4
• 20.12.5
• 20.12.6
• 20.12.7
• 20.12.8
• 20.12.9
• 20.12.10
• 20.12.11
• 20.12.12
• 20.12.13
• 20.12.14
• 20.12.15
• 20.12.16
• 21.12.0
• 21.12.1
• 21.12.2
• 21.12.3
• 21.12.4
• 21.12.5
• 21.12.6
• 21.12.7
• 21.12.8
• 21.12.9
• 21.12.10
• 21.12.11
• 21.12.12
• 21.12.13
• 21.12.14
• 21.12.15
• 21.12.16
• 21.12.17
• 22.12.0
• 22.12.1
• 22.12.2
• 22.12.3
• 22.12.4
• 22.12.5
• 22.12.6
• 22.12.7
• 22.12.8
• 22.12.9
• 22.12.10
• 22.12.11

License

• commercial

Website

• Vendor: https://www.oracle.com

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Discussion