CVE-2015-2570

2015-04-1617:00:03

[email protected]

web.nvd.nist.gov

vulnerability

oracle

demand planning

supply chain

security

nvd

cve-2015-2570

CVSS2

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

AI Score

5.5

Confidence

Low

EPSS

0.002

Percentile

57.2%

JSON

Unspecified vulnerability in the Oracle Demand Planning component in Oracle Supply Chain Products Suite 11.5.10, 12.0, 12.1, and 12.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Security.

Affected configurations

NVD

Node

oraclesupply_chain_products_suiteMatch11.5.10

oraclesupply_chain_products_suiteMatch12.0.0

oraclesupply_chain_products_suiteMatch12.1.0

oraclesupply_chain_products_suiteMatch12.2.0

VendorProductVersionCPE
oraclesupply_chain_products_suite12.0.0cpe:/a:oracle:supply_chain_products_suite:12.0.0:::
oraclesupply_chain_products_suite12.1.0cpe:/a:oracle:supply_chain_products_suite:12.1.0:::
oraclesupply_chain_products_suite12.2.0cpe:/a:oracle:supply_chain_products_suite:12.2.0:::
oraclesupply_chain_products_suite11.5.10cpe:/a:oracle:supply_chain_products_suite:11.5.10:::

Vendor	Product	Version	CPE
oracle	supply_chain_products_suite	12.0.0	cpe:/a:oracle:supply_chain_products_suite:12.0.0:::
oracle	supply_chain_products_suite	12.1.0	cpe:/a:oracle:supply_chain_products_suite:12.1.0:::
oracle	supply_chain_products_suite	12.2.0	cpe:/a:oracle:supply_chain_products_suite:12.2.0:::
oracle	supply_chain_products_suite	11.5.10	cpe:/a:oracle:supply_chain_products_suite:11.5.10:::