Lucene search

OracleCVE-2012-5094

HistoryOct 17, 2012 - 10:54 a.m.

CVE-2012-5094

2012-10-1710:54:31

oracle

web.nvd.nist.gov

cve-2012-5094

oracle agile plm

process component

oracle

supply chain products suite

vulnerability

nvd

user group management

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

5.8

Confidence

Low

EPSS

0.002

Percentile

54.9%

JSON

Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote attackers to affect confidentiality via unknown vectors related to User Group Management.

Affected configurations

Nvd

Node

oraclesupply_chain_products_suiteMatch5.2.2

oraclesupply_chain_products_suiteMatch6.1.0

VendorProductVersionCPE
oraclesupply_chain_products_suite5.2.2cpe:2.3:a:oracle:supply_chain_products_suite:5.2.2:*:*:*:*:*:*:*
oraclesupply_chain_products_suite6.1.0cpe:2.3:a:oracle:supply_chain_products_suite:6.1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	supply_chain_products_suite	5.2.2	cpe:2.3:a:oracle:supply_chain_products_suite:5.2.2:::::::*
oracle	supply_chain_products_suite	6.1.0	cpe:2.3:a:oracle:supply_chain_products_suite:6.1.0:::::::*

References

www.mandriva.com/security/advisories?name=MDVSA-2013:150

www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

5.8

Confidence

Low

EPSS

0.002

Percentile

54.9%

JSON

Related for CVE-2012-5094