CVE-2020-11022 | Oracle Primavera Gateway up to 16.2.11/17.12.7/18.8.9/19.12.4 Admin cross site scripting (EDB-49766 / Nessus ID 209233)
A vulnerability has been found in Oracle Primavera Gateway up to 16.2.11/17.12.7/18.8.9/19.12.4 and classified as critical. This vulnerability affects unknown code of the component Admin. The manipulation leads to cross site scripting.
This vulnerability was named CVE-2020-11022. The attack can be initiated remotely. Furthermore, there is an exploit available.
It is recommended to upgrade the affected component.