Primakon Project Contract Management
7 CVEs affecting Primakon Project Contract Management. Latest disclosed: 2025-11-25. Critical: 1, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-64063 | Critical | 9.8 | 2025-11-25 | Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing requests. Specifically, a standard user can exploit thi… |
CVE-2025-64065 | High | 8.8 | 2025-11-25 | The Primakon Pi Portal 1.0.18 API /api/V2/pp_udfv_admin endpoint, fails to perform necessary server-side validation. The administrative LoginAs or user imperso… |
CVE-2025-64064 | High | 8.8 | 2025-11-25 | Primakon Pi Portal 1.0.18 /api/v2/pp_users endpoint fails to adequately check user permissions before processing a PATCH request to modify the PP_SECURITY_PROF… |
CVE-2025-64062 | High | 8.8 | 2025-11-25 | The Primakon Pi Portal 1.0.18 /api/V2/pp_users?email endpoint is used for user data filtering but lacks proper server-side validation against the authenticated… |
CVE-2025-64066 | High | 8.6 | 2025-11-25 | Primakon Pi Portal 1.0.18 REST /api/v2/user/register endpoint suffers from a Broken Access Control vulnerability. The endpoint fails to implement any authoriza… |
CVE-2025-64067 | Medium | 5.3 | 2025-11-25 | Primakon Pi Portal 1.0.18 API endpoints responsible for retrieving object-specific or filtered data (e.g., user profiles, project records) fail to implement su… |
CVE-2025-64061 | Medium | 4.3 | 2025-11-25 | Primakon Pi Portal 1.0.18 /api/v2/users endpoint is vulnerable to unauthorized data exposure due to deficient access control mechanisms. Any authenticated user… |