CVE-2014-0435

2014-01-1516:08:10

[email protected]

web.nvd.nist.gov

oracle

transportation management

supply chain products suite

cve-2014-0435

nvd

security vulnerability

data security

domain security

function security

4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

5.5 Medium

AI Score

Confidence

Low

0.006 Low

EPSS

Percentile

78.1%

JSON

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, and 6.3.2 allows remote authenticated users to affect availability via unknown vectors related to Data, Domain & Function Security.

Affected configurations

NVD

Node

oraclesupply_chain_products_suiteMatch6.1.0

oraclesupply_chain_products_suiteMatch6.2.0

oraclesupply_chain_products_suiteMatch6.3.0

oraclesupply_chain_products_suiteMatch6.3.1

oraclesupply_chain_products_suiteMatch6.3.2

CPENameOperatorVersion
oracle:supply_chain_products_suiteoracle supply chain products suiteeq6.1.0
oracle:supply_chain_products_suiteoracle supply chain products suiteeq6.2.0
oracle:supply_chain_products_suiteoracle supply chain products suiteeq6.3.0
oracle:supply_chain_products_suiteoracle supply chain products suiteeq6.3.1
oracle:supply_chain_products_suiteoracle supply chain products suiteeq6.3.2

CPE	Name	Operator	Version
oracle:supply_chain_products_suite	oracle supply chain products suite	eq	6.1.0
oracle:supply_chain_products_suite	oracle supply chain products suite	eq	6.2.0
oracle:supply_chain_products_suite	oracle supply chain products suite	eq	6.3.0
oracle:supply_chain_products_suite	oracle supply chain products suite	eq	6.3.1
oracle:supply_chain_products_suite	oracle supply chain products suite	eq	6.3.2