CVE-2022-39409

Oracle Transportation Management (Oracle Supply Chain, Business Process Automation) is affected in versions 6.4.3 and 6.5.1. The vulnerability enables a high-privilege attacker with network access over HTTP to disrupt availability (partial DoS) of Oracle Transportation Management. The CVE is desc...

CVE-2022-21591

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: UI Infrastructure. Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2022-21591

Oracle Transportation Management (OTM) UI Infrastructure is affected in versions 6.4.3 and 6.5.1. The CVE describes a low-privilege, network-accessible attacker (via HTTP) able to update/insert/delete data and cause a partial Denial of Service. The vulnerability details do not include the exact r...

CVE-2022-39409

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Business Process Automation. Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

Oracle Transportation Management 安全漏洞

Oracle Supply Chain Products Suite is a set of supply chain solutions from Oracle Oracle. The product provides value chain planning, value chain execution, product lifecycle management and other functions. A denial of service vulnerability exists in Oracle Transportation Management versions 6.4.3...

CVE-2022-39411

CVE-2022-39411 affects Oracle Transportation Management (Oracle Supply Chain) 6.4.3 and 6.5.1. A high-privilege attacker with network access over HTTP can compromise OTM, potentially exposing all or critical data. CVSS v3.1 base score 4.9 (Confidentiality impact). The information is supported by ...

CVE-2022-39409

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Business Process Automation. Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2022-39420

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Data, Functional Security. Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Oracle Transportation Management 安全漏洞

Oracle Supply Chain Products Suite is a set of supply chain solutions from Oracle Oracle. The product provides value chain planning, value chain execution, product lifecycle management and other functions. An information disclosure vulnerability exists in Oracle Transportation Management versions...

CVE-2022-39411

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Business Process Automation. Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle...

CVE-2022-39420

CVE-2022-39420 affects Oracle Transportation Management (Oracle Supply Chain) with affected versions 6.4.3 and 6.5.1. The issue arises in the Data/Functional Security component and allows a low-privileged attacker with network access over HTTP to perform unauthorized updates/inserts/deletes and r...

Oracle Transportation Management Privilege Escalation (CVE-2021-35616)

A privilege escalation exists in Oracle Transportation Management. Successful exploitation of this vulnerability would allow a remote attacker to gain unauthorized access to the affected system...

Vulnerabilities fixed in Oracle Supply Chain products

Oracle has fixed vulnerabilities in several products belonging to the Oracle Supply Chain Suite: Agile Engineering Data Management Agile PLM Agile Product Lifecycle Management for Process Autovue for Agile Product Lifecycle Management Product Lifecycle Analytics Transportation Management A...

The vulnerability of the User Interface component of the Oracle Transportation Management software allows a perpetrator to gain access to read data or modify data.

The vulnerability of the User Interface component of the Oracle Transportation Management software is related to errors in the code. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to data or modify data using HTTP requests...

CVE-2022-21480

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: User Interface. Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Transportati...

CVE-2022-21480

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: User Interface. Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Transportati...

CVE-2022-21480

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: User Interface. Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Transportati...

Design/Logic Flaw

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: User Interface. Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Transportati...

CVE-2022-21480

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: User Interface. Supported versions that are affected are 6.4.3 and 6.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Transportati...

CVE-2022-21480

Oracle Transportation Management (OTM) within Oracle Supply Chain is affected by CVE-2022-21480 in the User Interface on affected 6.4.3 and 6.5.1 deployments. The issue is exploitable via HTTP by an unauthenticated network-attacker, with the attack requiring user interaction, and may lead to unau...