Primavera Unifier vulnerabilities

3 known vulnerabilities in Primavera Unifier from Oracle. 3 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.4 High severity

  Primavera Unifier: Improper Access Control

  CVE-2026-101736Oct 20, 2026Oracle

  Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Core). Supported versions that are affected are 21.12.0-21.12.17. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP

• 7.1 High severity

  Primavera Unifier: Improper Access Control

  CVE-2026-101735Oct 20, 2026Oracle

  Vulnerability in the Primavera Unifier product of Oracle Construction and Engineering (component: Project Control). Supported versions that are affected are 23.12.0-23.12.16. Easily exploitable vulnerability allows low privileged attacker with network access v

• 7.5 High severity

  Apache Solr VelocityResponseWriter Plug-In Remote Code Execution Exploited

  CVE-2019-17558Dec 30, 2019Apache SolrEPSS 98.6%

  Apache Solr 5.0.0 to Apache Solr 8.3.1 are vulnerable to a Remote Code Execution through the VelocityResponseWriter. A Velocity template can be provided through Velocity templates in a configset `velocity/` directory or as a parameter. A user defined configset