Skip to content

RadicalNotion.AI

We do not sell or share your personal information

© 2026 RadicalNotion.AI

Security Data

CWE Directory
CAPEC Directory
CNA Directory
CNA Report Cards
Data Sources

Calculators

CVSS Calculator
CVSS 4.0
CVSS 3.1
CVSS 3.0
CVSS 2.0

Platform

My Vulnerabilities
Insights
Notifications
Account
Pricing

Learn

All guides
What is a CVE?
What is CVSS?
The CISA KEV catalog
What is EPSS?

Company

About us
Blog
Book a demo

Get Started

Sign up
Log in

Legal

Privacy
Terms

Security data

Weaknesses (CWE)The MITRE CWE weakness catalog
Attack Patterns (CAPEC)MITRE CAPEC attack patterns
CNAsNumbering authorities + report cards
VendorsVulnerabilities by vendor

Tools

CVSS CalculatorScore CVSS 4.0, 3.1, 3.0 & 2.0

Resources

LearnPlain-English security guides
Data SourcesHow we source CVE data

About Us Blog Pricing Book a Demo

Log in

Home
Vendors
Oracle
Primavera Gateway

oracle primavera gateway Vulnerabilities: CVEs, CISA KEV & Security Advisories

59 CVEs

1 in CISA KEV

oracle primavera gateway Vulnerabilities

CVE security advisories and vulnerability history for primavera gateway by oracle.

59

Total CVEs

Published

1

In CISA KEV

Exploited in the wild

7

Public exploits

With known exploit

7.5

Avg CVSS

2017–2023

Last updated January 17, 2023

Overview

oracle primavera gateway has 59 published CVE records since 2017, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 7 have a known public exploit. The average CVSS base score across scored CVEs is 7.5.

This page aggregates every publicly disclosed vulnerability (CVE) affecting oracle primavera gateway, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of oracle primavera gateway's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical1

High11

Medium8

Low0

39 additional CVEs have no CVSS severity score.

In CISA’s Known Exploited Vulnerabilities catalog

1

One of oracle primavera gateway's CVEs is confirmed exploited in the wild.

Public exploits

7

7 of oracle primavera gateway's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every oracle primavera gateway version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for oracle primavera gateway; the CVEs below apply to the product without a version pin.

59 CVEs

Sort

Medium vulnerability · 2023-01-17
CVE-2023-21888
Medium · CVSS 5.4
EPSS 0.4% (58th pct)2023-01-17
High vulnerability · 2022-03-11
CVE-2020-36518
Patch
CWE-787
High · CVSS 7.5
EPSS 0.5% (66th pct)2022-03-11
Vulnerability · 2022-01-24
CVE-2022-23437
Patch
Workaround
Unscored
EPSS 0.1% (25th pct)2022-01-24
Apache Log4j2 vulnerable to RCE via JDBC Appender when attacker controls configuration
CVE-2021-44832
Patch
CWE-20
Medium · CVSS 6.6
EPSS 53.6% (98th pct)2021-12-28
Apache Log4j2 does not always protect from infinite recursion in lookup evaluation
CVE-2021-45105
Patch
Workaround
CWE-20
Medium · CVSS 5.9
EPSS 74.0% (99th pct)2021-12-18
XSS in `*Text` options of the Datepicker widget
CVE-2021-41183
Patch
CWE-79
Medium · CVSS 6.5
EPSS 3.1% (87th pct)2021-10-26
High vulnerability · 2021-07-20
CVE-2021-2351
Public exploit
Patch
High · CVSS 8.3
EPSS 3.3% (87th pct)2021-07-20
Vulnerability · 2021-07-14
CVE-2021-36374
Patch
Workaround
CWE-130
Unscored
EPSS 0.1% (34th pct)2021-07-14
Vulnerability · 2021-07-14
CVE-2021-36373
Patch
Workaround
CWE-130
Unscored
EPSS 0.1% (28th pct)2021-07-14
Vulnerability · 2021-07-13
CVE-2021-36090
Patch
Workaround
CWE-130
Unscored
EPSS 0.7% (73th pct)2021-07-13
Medium vulnerability · 2021-03-30
CVE-2021-21409
Patch
CWE-444
Medium · CVSS 5.9
EPSS 2.5% (86th pct)2021-03-30
High vulnerability · 2021-02-15
CVE-2021-23337
Patch
High · CVSS 7.2
EPSS 4.3% (89th pct)2021-02-15
Medium vulnerability · 2021-02-15
CVE-2020-28500
Patch
Medium · CVSS 5.3
EPSS 0.2% (48th pct)2021-02-15
High vulnerability · 2021-01-06
CVE-2020-36179
Patch
CWE-502
High · CVSS 8.8
EPSS 61.9% (98th pct)2021-01-06
High vulnerability · 2021-01-06
CVE-2020-36180
Patch
CWE-502
High · CVSS 8.8
EPSS 3.2% (87th pct)2021-01-06
High vulnerability · 2021-01-06
CVE-2020-36182
Patch
CWE-502
High · CVSS 8.8
EPSS 2.9% (87th pct)2021-01-06
Vulnerability · 2021-01-06
CVE-2020-36183
Patch
Unscored
EPSS 2.2% (85th pct)2021-01-06
High vulnerability · 2021-01-06
CVE-2020-36184
Patch
CWE-502
High · CVSS 8.8
EPSS 7.5% (92th pct)2021-01-06
Vulnerability · 2021-01-06
CVE-2020-36185
Patch
Unscored
EPSS 2.9% (87th pct)2021-01-06
Vulnerability · 2021-01-06
CVE-2020-36186
Patch
Unscored
EPSS 2.6% (86th pct)2021-01-06
Vulnerability · 2021-01-06
CVE-2020-36187
Patch
Unscored
EPSS 2.3% (85th pct)2021-01-06
Vulnerability · 2021-01-06
CVE-2020-36188
Patch
Unscored
EPSS 10.2% (93th pct)2021-01-06
Vulnerability · 2021-01-06
CVE-2020-36189
Patch
Unscored
EPSS 4.3% (89th pct)2021-01-06
High vulnerability · 2021-01-06
CVE-2020-36181
Patch
CWE-502
High · CVSS 8.8
EPSS 5.9% (91th pct)2021-01-06
High vulnerability · 2020-12-27
CVE-2020-35728
Patch
CWE-502
High · CVSS 8.1
EPSS 42.3% (98th pct)2020-12-27
Vulnerability · 2020-12-07
CVE-2020-17521
Patch
Unscored
EPSS 2.4% (85th pct)2020-12-07
Vulnerability · 2020-12-03
CVE-2020-25649
Patch
CWE-611
Unscored
EPSS 0.1% (23th pct)2020-12-03
Vulnerability · 2020-10-01
CVE-2020-11979
Patch
CWE-379
Unscored
EPSS 1.1% (78th pct)2020-10-01
High vulnerability · 2020-09-19
CVE-2020-5421
Patch
High · CVSS 8.7
EPSS 63.8% (98th pct)2020-09-19
Vulnerability · 2020-07-15
CVE-2020-8203
Patch
CWE-770
Unscored
EPSS 2.5% (86th pct)2020-07-15

Showing 30 of 59

Common weakness types

The CWE weakness categories most often found in oracle primavera gateway CVEs. Follow any weakness for its full explanation.

CWE-502Deserialization of Untrusted Data7 CVEs
CWE-130Improper Handling of Length Parameter Inconsistency3 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')3 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-20Improper Input Validation2 CVEs
CWE-611Improper Restriction of XML External Entity Reference1 CVE
CWE-770Allocation of Resources Without Limits or Throttling1 CVE
CWE-787Out-of-bounds Write1 CVE

Disclosure activity by year

How many oracle primavera gateway CVEs were published each year.

2017

3

2018

8

2019

16

2020

8

2021

21

2022

2

2023

1

Other oracle products

Browse vulnerabilities for other products by oracle.

mysql1,329 CVEs jre800 CVEs jdk792 CVEs solaris755 CVEs database server518 CVEs vm virtualbox417 CVEs peoplesoft enterprise peopletools354 CVEs e-business suite332 CVEs

All oracle vulnerabilities

Frequently asked questions

Common questions about oracle primavera gateway vulnerabilities.

How many CVEs does oracle primavera gateway have?

oracle primavera gateway has 59 published CVE records since 2017.

How many oracle primavera gateway CVEs are in CISA KEV?

Yes — 1 of oracle primavera gateway's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for oracle primavera gateway vulnerabilities?

Yes — 7 of oracle primavera gateway's CVEs have a known public exploit.

What are the most common weakness types in oracle primavera gateway CVEs?

oracle primavera gateway's CVEs most often map to these CWE weakness types: CWE-502 (Deserialization of Untrusted Data), CWE-130 (Improper Handling of Length Parameter Inconsistency), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), CWE-94 (Improper Control of Generation of Code ('Code Injection')).

How many critical oracle primavera gateway vulnerabilities are there?

oracle primavera gateway has 1 critical and 11 high-severity CVEs.

What is the average severity of oracle primavera gateway CVEs?

The average CVSS base score across oracle primavera gateway's scored CVEs is 7.5.

References

All oracle vulnerabilities
The MITRE CVE Program (opens in a new tab)
Learn: What is a CVE?
CWE directory: the weakness types these CVEs map to

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track oracle primavera gateway vulnerabilities

Monitor new oracle primavera gateway vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing

On this page

Overview
Severity and exploitation
Affected versions and CVEs
Common weakness types
Disclosure activity
Other products
FAQ
References