CVE-2014-0434

2014-01-1516:08:10

[email protected]

web.nvd.nist.gov

cve-2014-0434

vulnerability

oracle

agile product lifecycle management

supply chain products suite

remote attackers

integrity

installation

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.9 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.7%

JSON

Unspecified vulnerability in the Oracle Agile Product Lifecycle Management for Process component in Oracle Supply Chain Products Suite 6.0, 6.1, and 6.1.1 allows remote attackers to affect integrity via unknown vectors related to Installation.

Affected configurations

NVD

Node

oraclesupply_chain_products_suiteMatch6.0.0

oraclesupply_chain_products_suiteMatch6.1.0

oraclesupply_chain_products_suiteMatch6.1.1.0

CPENameOperatorVersion
oracle:supply_chain_products_suiteoracle supply chain products suiteeq6.0.0
oracle:supply_chain_products_suiteoracle supply chain products suiteeq6.1.0
oracle:supply_chain_products_suiteoracle supply chain products suiteeq6.1.1.0

CPE	Name	Operator	Version
oracle:supply_chain_products_suite	oracle supply chain products suite	eq	6.0.0
oracle:supply_chain_products_suite	oracle supply chain products suite	eq	6.1.0
oracle:supply_chain_products_suite	oracle supply chain products suite	eq	6.1.1.0