CVE-2013-5795

🗓️ 15 Jan 2014 00:30:00Reported by oracleType

cve

cve🔗 web.nvd.nist.gov👁 54 Views🌐 WEB

Unspecified vulnerability in Oracle Demantra Demand Management componen

Reporter	Title	Published	Views	Family All 13
0day.today	Oracle Demantra 12.2.1 - Database Credentials Disclosure	1 Mar 201400:00	–	zdt
Circl	CVE-2013-5795	1 Mar 201400:00	–	circl
Cvelist	CVE-2013-5795	15 Jan 201400:30	–	cvelist
Metasploit	Oracle Demantra Database Credentials Leak	7 Apr 201418:42	–	metasploit
NVD	CVE-2013-5795	15 Jan 201416:11	–	nvd
Oracle	Oracle Critical Patch Update - January 2014	14 Jan 201400:00	–	oracle
Oracle	Oracle Critical Patch Update - January 2014	14 Jan 201400:00	–	oracle
Packet Storm	Oracle Demantra 12.2.1 Database Credential Leak	2 Mar 201400:00	–	packetstorm
Packet Storm	Oracle Demantra Database Credentials Leak	1 Sep 202400:00	–	packetstorm
Prion	Buffer overflow	15 Jan 201416:11	–	prion

NVD

Node

oracle supply_chain_products_suiteMatch7.2.0.3

OR

oracle supply_chain_products_suite_sql-serverMatch7.3.0

OR

oracle supply_chain_products_suite_sql-serverMatch7.3.1

OR

oracle supply_chain_products_suite_sql-serverMatch12.2.1

OR

oracle supply_chain_products_suite_sql-serverMatch12.2.2

OR

oracle supply_chain_products_suite_sql-serverMatch12.2.3

Source	Link
securityfocus	www.securityfocus.com/bid/64758
oracle	www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
securitytracker	www.securitytracker.com/id/1029620
osvdb	www.osvdb.org/102096
secunia	www.secunia.com/advisories/56474
securityfocus	www.securityfocus.com/bid/64846

Parameter	Position	Path	Description	CWE
UAK	query param	demantra/ServerDetailsServlet	Unauthenticated access leads to retrieval of database credentials and details via ServerDetailsServlet (CVE-2013-5795).

29 Apr 2026 01:13Current

5.5Medium risk

Vulners AI Score5.5

CVSS 25

EPSS0.75952

cve-2013-5795 oracle demantra demand management supply chain sql-server 7.2.0.3 7.3.0 7.3.1 12.2.1 12.2.2 12.2.3 nvd vulnerability confidentiality remote attackers