project contract management vulnerabilities and fixes

Recent CVEs affecting project contract management, with upgrade or downgrade steps. 7 tracked.

Also searched as: projectcontractmanagement.

project contract management has 7 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2025-11-25. Highest priority: CVE-2025-64063 (score 48/100).

• CVE-2025-64067 MEDIUM 5.3 DOWNGRADE Primakon Pi Portal 1.0.18 API endpoints responsible for retrieving object-specific or filtered data (e.g., use
• CVE-2025-64066 HIGH 8.6 DOWNGRADE Primakon Pi Portal 1.0.18 REST /api/v2/user/register endpoint suffers from a Broken Access Control vulnerabili
• CVE-2025-64065 HIGH 8.8 DOWNGRADE The Primakon Pi Portal 1.0.18 API /api/V2/pp_udfv_admin endpoint, fails to perform necessary server-side valid
• CVE-2025-64064 HIGH 8.8 DOWNGRADE Primakon Pi Portal 1.0.18 /api/v2/pp_users endpoint fails to adequately check user permissions before processi
• CVE-2025-64063 CRITICAL 9.8 DOWNGRADE Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing reques
• CVE-2025-64062 HIGH 8.8 DOWNGRADE The Primakon Pi Portal 1.0.18 /api/V2/pp_users?email endpoint is used for user data filtering but lacks proper
• CVE-2025-64061 MEDIUM 4.3 DOWNGRADE Primakon Pi Portal 1.0.18 /api/v2/users endpoint is vulnerable to unauthorized data exposure due to deficient

FAQ

How do I fix project contract management vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is project contract management being exploited right now?

None of the tracked project contract management CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which project contract management CVE should I patch first?

CVE-2025-64063 currently ranks highest (48/100): Primakon Pi Portal 1.0.18 API endpoints fail to enforce sufficient authorization checks when processing reques.

RSS feed for project contract management · ← Back to latest CVEs