CVE-2015-2570

2015-04-1617:00:03

[email protected]

web.nvd.nist.gov

vulnerability

oracle

demand planning

supply chain

security

nvd

cve-2015-2570

5.5 Medium

AI Score

Confidence

Low

6.5 Medium

CVSS2

Access Vector

Access Complexity

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

57.0%

JSON

Unspecified vulnerability in the Oracle Demand Planning component in Oracle Supply Chain Products Suite 11.5.10, 12.0, 12.1, and 12.2 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors related to Security.

Affected configurations

NVD

Node

oraclesupply_chain_products_suiteMatch11.5.10

oraclesupply_chain_products_suiteMatch12.0.0

oraclesupply_chain_products_suiteMatch12.1.0

oraclesupply_chain_products_suiteMatch12.2.0

CPENameOperatorVersion
oracle:supply_chain_products_suiteoracle supply chain products suiteeq11.5.10
oracle:supply_chain_products_suiteoracle supply chain products suiteeq12.0.0
oracle:supply_chain_products_suiteoracle supply chain products suiteeq12.1.0
oracle:supply_chain_products_suiteoracle supply chain products suiteeq12.2.0

CPE	Name	Operator	Version
oracle:supply_chain_products_suite	oracle supply chain products suite	eq	11.5.10
oracle:supply_chain_products_suite	oracle supply chain products suite	eq	12.0.0
oracle:supply_chain_products_suite	oracle supply chain products suite	eq	12.1.0
oracle:supply_chain_products_suite	oracle supply chain products suite	eq	12.2.0