CVE-2026-91376: Primavera P6 Enterprise Project Portfolio Management 21.12.0.0 through 21.12.21.9, 22.12.0.0 through 22.12.21.4…

Affected technology

Primavera P6 Enterprise Project Portfolio Management · 21.12.0.0 through 21.12.21.9, 22.12.0.0 through 22.12.21.4, 23.12.0 through 23.12.20, 24.12.0 through 24.12.16, 25.12.0 through 25.12.8
Oracle Corporation

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Network (remote) · Low privileges required · User interaction required

What an attacker can do

Low privileged attacker with network access via HTTP can compromise Primavera P6 Enterprise Project Portfolio Management. Vendor/CNA’s CVSS 3.1 assessment (base score 6.5/10) rates confidentiality impact as high; integrity impact as low; availability impact as none.