Vulnerabilities fixed in Oracle Supply Chain Products Suite

Oracle has fixed vulnerabilities in the following products within the Supply Chain Products Suite: Transportation Management Agile Engineering Data Management Agile PLM Framework An unauthenticated malicious person could potentially exploit them to cause a denial-of-service. In addition the...

Command execution vulnerability exists in KYTMS (CNVD-2021-53899)

KYTMS is a TMS transportation management system. KYTMS suffers from a command execution vulnerability that can be exploited by an attacker to gain server privileges...

XSS Vulnerability in Fenxian Chain Transportation Management Cloud Platform of Zhongtong Cloud Warehouse Technology Co.

Zhongtong Cloud Warehouse Technology is a logistics enterprise under Zhongtong Express Group, which provides professional warehousing and distribution integrated supply chain comprehensive services for e-commerce platforms, brand merchants, social e-commerce companies and live broadcasting...

Unauthorized Access Vulnerability in Transportation Management System of Shandong Dingsoft World Information Technology Co.

Founded in 2015, Shandong Dingsoft World Information Technology Co., Ltd. is a professional IT service provider integrating logistics management consulting, logistics software development and so on. An unauthorized access vulnerability exists in the Transportation Management System of Shandong...

The vulnerability of the Data, Domain & Function Security component of the Oracle Transportation Management software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Data, Domain, and Function Security component of the Oracle Transportation Management software lies in the lack of protection for operational data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

Oracle Supply Chain Transportation Management Information Disclosure Vulnerability

Oracle Supply Chain Products Suite is a set of supply chain solutions from Oracle. The product provides value chain planning, value chain execution, product lifecycle management and other functions.Transportation Management is one of the platform through the supply chain management of all...

CVE-2020-14544

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Data, Domain & Function Security. The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2020-14544

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Data, Domain & Function Security. The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

Design/Logic Flaw

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Data, Domain & Function Security. The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2020-14544

CVE-2020-14544 affects Oracle Transportation Management (Oracle Supply Chain) with the affected version 6.4.3. The vulnerability allows a low-privilege, network-exposed attacker (via HTTP) to read a subset of data from Oracle Transportation Management. Root cause details are described in multiple...

CVE-2020-14544

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Data, Domain & Function Security. The supported version that is affected is 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

The vulnerability of the Security component of the Oracle Transportation Management system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Security component of the Oracle Transportation Management system relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information using the HTTP protocol...

Oracle Supply Chain Products Suite Transportation Management Unauthorized Operation Vulnerability

Oracle Supply Chain Products Suite is a set of supply chain solutions from Oracle. The product provides value chain planning, value chain execution, product lifecycle management and other functions.Transportation Management is one of the platform through the supply chain management of all...

CVE-2020-2744

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Security. Supported versions that are affected are 6.3.7, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportati...

CVE-2020-2744

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Security. Supported versions that are affected are 6.3.7, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportati...

Design/Logic Flaw

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Security. Supported versions that are affected are 6.3.7, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportati...

CVE-2020-2744

CVE-2020-2744 affects Oracle Transportation Management (Oracle Supply Chain) Security component in versions 6.3.7, 6.4.2 and 6.4.3. The vulnerability enables an attacker with network access over HTTP and low privileges to compromise data, including unauthorized read and (potentially) update/inser...

CVE-2020-2744

Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain component: Security. Supported versions that are affected are 6.3.7, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Transportati...

File upload vulnerability in high-speed rail wifi system

The high-speed rail WiFi system provides an integrated wireless information application platform, which can provide passengers with rich information and entertainment applications, as well as a management platform for on-board staff to the passenger transportation management. There is a file uplo...

CVE-2019-2709

Vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite subcomponent: Security. Supported versions that are affected are 6.3.7, 6.4.2 and 6.4.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromis...