Oracle Demantra 12.2.1 Reflective Cross Site Scripting

Vulnerability title: Reflective XSS in Oracle Demantra CVE: CVE-2014-0371 Vendor: Oracle Product: Demantra Affected version: 12.2.1 Fixed version: 12.2.3 Reported by: Oliver Gruskovnjak Details: Reflective Cross-Site Scripting issues found in Oracle Demantra:...

CVE-2014-0371

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0.x, 7.3.1.x, 12.2.0, 12.2.1, and 12.2.2 allows remote authenticated users to affect integrity via unknown vectors related to DM Others...

CVE-2014-0371

CVE-2014-0371 relates to Oracle Demantra Demantra 12.2.1. The connected PacketStorm entry documents a Reflective Cross‑Site Scripting (XSS) vulnerability affecting Oracle Demantra 12.2.1, with a fix in 12.2.3. The exploit path involves crafted input in Demantra web pages such as editExecDefinitio...