CVE-2013-5877

2014-01-1516:11:05

[email protected]

web.nvd.nist.gov

oracle

demantra

vulnerability

sql-server

supply chain products suite

cve-2013-5877

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

5.5 Medium

AI Score

Confidence

Low

0.884 High

EPSS

Percentile

98.7%

JSON

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, and 12.2.1 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.

Affected configurations

NVD

Node

oraclesupply_chain_products_suiteMatch7.2.0.3

oraclesupply_chain_products_suite_sql-serverMatch7.3.0

oraclesupply_chain_products_suite_sql-serverMatch7.3.1

oraclesupply_chain_products_suite_sql-serverMatch12.2.0

oraclesupply_chain_products_suite_sql-serverMatch12.2.1

CPENameOperatorVersion
oracle:supply_chain_products_suiteoracle supply chain products suiteeq7.2.0.3
oracle:supply_chain_products_suite_sql-serveroracle supply chain products suite sql-servereq7.3.0
oracle:supply_chain_products_suite_sql-serveroracle supply chain products suite sql-servereq7.3.1
oracle:supply_chain_products_suite_sql-serveroracle supply chain products suite sql-servereq12.2.0
oracle:supply_chain_products_suite_sql-serveroracle supply chain products suite sql-servereq12.2.1

CPE	Name	Operator	Version
oracle:supply_chain_products_suite	oracle supply chain products suite	eq	7.2.0.3
oracle:supply_chain_products_suite_sql-server	oracle supply chain products suite sql-server	eq	7.3.0
oracle:supply_chain_products_suite_sql-server	oracle supply chain products suite sql-server	eq	7.3.1
oracle:supply_chain_products_suite_sql-server	oracle supply chain products suite sql-server	eq	12.2.0
oracle:supply_chain_products_suite_sql-server	oracle supply chain products suite sql-server	eq	12.2.1