CVE-2014-0372

2014-01-1516:08:00

NVD-CWE-noinfo

[email protected]

web.nvd.nist.gov

oracle

demantra demand management

vulnerability

sql-server

supply chain products suite

nvd

5.2 Medium

AI Score

Confidence

Low

5.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:S/C:P/I:P/A:N

0.24 Low

EPSS

Percentile

96.6%

JSON

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, and 12.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to DM Others.

CPENameOperatorVersion
oracle:supply_chain_products_suite_sql-serveroracle supply chain products suite sql-servereq7.3.0
oracle:supply_chain_products_suite_sql-serveroracle supply chain products suite sql-servereq12.2.1
oracle:supply_chain_products_suiteoracle supply chain products suiteeq7.2.0.3
oracle:supply_chain_products_suite_sql-serveroracle supply chain products suite sql-servereq12.2.2
oracle:supply_chain_products_suite_sql-serveroracle supply chain products suite sql-servereq12.2.0
oracle:supply_chain_products_suite_sql-serveroracle supply chain products suite sql-servereq7.3.1

CPE	Name	Operator	Version
oracle:supply_chain_products_suite_sql-server	oracle supply chain products suite sql-server	eq	7.3.0
oracle:supply_chain_products_suite_sql-server	oracle supply chain products suite sql-server	eq	12.2.1
oracle:supply_chain_products_suite	oracle supply chain products suite	eq	7.2.0.3
oracle:supply_chain_products_suite_sql-server	oracle supply chain products suite sql-server	eq	12.2.2
oracle:supply_chain_products_suite_sql-server	oracle supply chain products suite sql-server	eq	12.2.0
oracle:supply_chain_products_suite_sql-server	oracle supply chain products suite sql-server	eq	7.3.1