CVE-2012-0549

CVE-2012-0549 covers a stack buffer overflow in the Oracle AutoVue ActiveX control SetMarkupMode (AutoVueX.ocx, CLSID {B6FCC215-D303-11D1-BC6C-0000C078797F}). Affected product family: Oracle AutoVue Desktop/AutoVue ActiveX for Windows. Root cause: insecure handling/sanitization in SetMarkupMode (...

CVE-2015-1793

The CVE-2015-1793 entry concerns OpenSSL’s X509_verify_cert in crypto/x509/x509_vfy.c, affecting OpenSSL 1.0.1n/o and 1.0.2b/c, where Basic Constraints cA values are mishandled when identifying alternative certificate chains. This could allow a remote attacker to spoof a Certification Authority r...

CVE-2015-2644

Concretely, CVE-2015-2644 affects Oracle Supply Chain Products Suite (Agile PLM Framework) version 9.3.3, where the Security subcomponent is vulnerable. A remote attacker could read data, compromising confidentiality. The CNVD entry confirms the vulnerability exists in the Agile PLM Framework’s S...

CVE-2013-5868

Technical details for CVE-2013-5868 are not publicly available in the provided documents. No concrete information on affected products, root cause, or remediation is present here. Monitor for updates from primary sources and trusted advisories.

CVE-2013-5880

CVE-2013-5880 concerns Oracle Demantra Demand Management (Oracle Demantra, part of Oracle Supply Chain) with vulnerable versions including 12.2.1 and related 12.2.x lines. Connected documents confirm concrete details: authentication bypass and credential leakage scenarios affecting Demantra 12.2....

CVE-2014-6543

Technical details for CVE-2014-6543 are not publicly available in the provided documents; no affected products, root cause, or fixes are specified here. Monitor for updates.

CVE-2012-1759

Oracle AutoVue vulnerabilities CVE-2012-1758 and CVE-2012-1759 affect Oracle AutoVue in Oracle Supply Chain Products Suite 20.0.2/20.1. Affected components: DGN (CVE-2012-1758) and DXF (CVE-2012-1759) parsers. Root cause: handling of specially crafted files leading to heap corruption or stack exc...

CVE-2015-4917

CVE-2015-4917 concerns Oracle Agile PLM within Oracle Supply Chain Products Suite 9.3.4. The vulnerability is described as an unspecified issue that allows remote authenticated users to affect integrity via unknown vectors, separate from CVE-2015-4892. Supported sources (NVD/NVD-derived and relat...

CVE-2010-3505

CVE-2010-3505 describes an unspecified vulnerability in the Agile Core component of Oracle Supply Chain Products Suite 9.3.0.2 and 9.3.1. The issue would allow remote authenticated users to affect confidentiality via unknown vectors related to Folders, Files & Attachments (a different vulnerabili...

CVE-2011-0837

CVE-2011-0837 denotes an unspecified vulnerability in the Agile Technology Platform component of Oracle Supply Chain Products Suite (SCP) 9.3.0.2 and 9.3.1. The vulnerability is described as allowing remote attackers to affect confidentiality through unknown vectors related to Security. The affec...

CVE-2013-5877

Mode C: CVE-2013-5877 affects Oracle Demantra Demantra/GraphServlet components across multiple 7.x and 12.2.x versions of Oracle Supply Chain Products Suite (including 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, 12.2.1). Public details in connected sources describe an arbitrary file retrieval/local...

CVE-2012-1758

Oracle AutoVue in Oracle Supply Chain Products Suite (versions 20.1.1 and 20.2) contains two parsing vulnerabilities: (1) DGN parsing can lead to arbitrary code execution due to heap/stack corruption when processing crafted DGN files; (2) DXF parsing can also cause memory corruption. Successful e...

CVE-2013-5795

Oracle Demantra has a backend Database Credentials Leak vulnerability (CVE-2013-5795) affecting Demantra Demand Management within Oracle Supply Chain Products Suite (versions including 12.2.1, 12.2.2, 12.2.3 and related 7.x/SQL-Server lines). The issue enables an attacker to retrieve database ins...

CVE-2013-0370

Technical details for CVE-2013-0370 are not publicly provided in the supplied documents. The description remains generic (unspecified vulnerability in Oracle Agile PLM Framework). Monitor Oracle CPU advisories and CVE records for updates.

CVE-2015-4848

Technical details for CVE-2015-4848 are not publicly available in the provided documents. Monitor for updates from vendors and security advisories to learn affected products, impact, and remediation.

CVE-2012-3116

CVE-2012-3116 affects Oracle Transportation Management, within Oracle Supply Chain Products Suite versions 5.5.06, 6.0, 6.1, and 6.2. The vulnerability is described as unspecified and allows local users to affect confidentiality via unknown vectors. The available data does not specify the root ca...

CVE-2014-0371

CVE-2014-0371 relates to Oracle Demantra Demantra 12.2.1. The connected PacketStorm entry documents a Reflective Cross‑Site Scripting (XSS) vulnerability affecting Oracle Demantra 12.2.1, with a fix in 12.2.3. The exploit path involves crafted input in Demantra web pages such as editExecDefinitio...

CVE-2010-2371

CVE-2010-2371 affects Oracle Transportation Management (Oracle Supply Chain Products Suite) 6.1.1. The NVD/NVD-derived entries describe an unspecified vulnerability that local users can exploit to affect confidentiality via unknown vectors; this is contrasted with CVE-2010-2372, which is describe...

CVE-2010-4429

CVE-2010-4429 affects Oracle’s Agile Core in the Oracle Supply Chain Products Suite (versions 9.3.0.2 and 9.3.1). The vulnerability allows remote authenticated users to affect integrity via unknown vectors related to the Web Client, and is noted as a different issue from CVE-2010-3505. The connec...

CVE-2013-3823

The CVE-2013-3823 entry concerns an unspecified vulnerability in the Oracle Agile PLM Framework within Oracle Supply Chain Products Suite 9.3.1 that allows remote authenticated users to affect confidentiality via unknown vectors. The connected documents do not provide concrete technical details (...

CVE-2014-4234

Technical details of CVE-2014-4234 are not publicly available in the provided documents; no affected product versions, vectors, impact, or remediation are specified. Monitor for updates.

CVE-2012-5092

CVE-2012-5092 affects Oracle Agile PLM for Process within Oracle Supply Chain Products Suite (versions 5.2.2 and 6.1.0.0). The vulnerability is described as unspecified, allowing remote authenticated users to impact confidentiality and integrity via unknown vectors related to Supply Chain Relatio...

CVE-2014-6498

Technical details for CVE-2014-6498 are not provided in the supplied documents. Public information is limited to an unspecified vulnerability description; monitor for updates.

CVE-2014-6533

CVE-2014-6533 affects the Oracle Transportation Management component of Oracle Supply Chain Products Suite (versions 6.1 and 6.2). The vulnerability is described as unspecified and allows remote attackers to impact confidentiality, integrity, and availability via unknown vectors related to Securi...

CVE-2015-4746

The CVE-2015-4746 entry concerns Oracle Supply Chain: Oracle Agile Product Lifecycle Management for Process component versions 6.0.0.7, 6.1.0.3, 6.1.1.5, and 6.2.0.0. It describes an unspecified vulnerability that allows remote authenticated users to affect confidentiality via unknown vectors rel...

CVE-2015-4824

CVE-2015-4824 is an Unspecified vulnerability in the Oracle Agile PLM component of Oracle Supply Chain Products Suite 9.3.4. The impact is confidentiality, stated as affecting remote authenticated users; vectors are unknown. The NVD entry lists a low CVSS v2 base score (2.1) with network access a...

CVE-2012-3161

CVE-2012-3161 affects the Oracle Agile PLM Framework component within Oracle Supply Chain Products Suite 9.3.1.1. Description in the primary record states an unspecified vulnerability that could allow remote attackers to affect integrity via unknown vectors related to the Web Client (CS). Connect...

CVE-2014-0444

Technical details about CVE-2014-0444 are not publicly available in the provided documents; monitor for updates from NVD/Oracle.

CVE-2015-0463

Oracle Transportation Management (Oracle Supply Chain Products Suite 6.2–6.3.x) has a security vulnerability in the Security subcomponent that could allow remote attackers with authentication to read data and compromise confidentiality. The CNVD entry specifies exploitation by remote attackers an...

CVE-2010-2372

CVE-2010-2372 affects Oracle Transportation Management, part of Oracle Supply Chain Products Suite, Version 6.1.1. The vulnerability is listed in Oracle’s July 2010 Critical Patch Update under Oracle Transportation Management with CVSS v2 base score 4.3 (Network, Medium severity) and is exploitab...

CVE-2011-3532

CVE-2011-3532 concerns Oracle Agile Product Supplier Collaboration for Process within Oracle Supply Chain Products Suite (versions 5.2.2, 6.0.0.2, 6.0.0.3, 6.0.0.4). The initial description states an unspecified vulnerability that allows remote attackers to affect confidentiality via unknown vect...

CVE-2012-0566

The CVE-2012-0566 entry concerns the Oracle Agile component within Oracle Supply Chain Products Suite versions 5.2.2, 6.0.0, and 6.1.1. The description indicates an unspecified vulnerability that could allow remote attackers to compromise integrity via unknown vectors related to the Supplier Port...

CVE-2013-3825

CVE-2013-3825 concerns the Oracle Agile Product Collaboration component within Oracle Supply Chain Products Suite 9.3.1. The description states an unspecified vulnerability that allows remote authenticated users to affect confidentiality via unknown vectors related to Folders & Files Attachment. ...

CVE-2015-2657

Oracle Transportation Management (Oracle Supply Chain Products Suite) versions 6.1–6.3.7 contain an unspecified vulnerability that could allow remote authenticated users to affect confidentiality via unknown vectors in Business Process Automation. The description does not specify the root cause, ...

CVE-2015-2660

CVE-2015-2660 affects Oracle Supply Chain Products Suite, specifically the Oracle Agile PLM component (PLM Framework). The vulnerability allows remote authenticated users to impact confidentiality and integrity, with vectors related to Oracle Agile PLM Framework. Affected versions include Oracle ...

CVE-2015-4768

CVE-2015-4768 describes an unspecified vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (versions 6.1, 6.2, 6.3.0–6.3.7) that allows remote authenticated users to affect confidentiality via unknown vectors related to Diagnostics. The NVD entry ...

CVE-2012-3117

CVE-2012-3117 affects Oracle Transportation Management in Oracle Supply Chain Products Suite (versions 5.5.06, 6.0, 6.1, 6.2). Described as an unspecified vulnerability allowing remote authenticated users to affect confidentiality via unknown HTTP-related vectors. The connected documents do not p...

CVE-2012-5091

CVE-2012-5091 targets Oracle Agile Product Supplier Collaboration for Process in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0. The documented impact is an unspecified vulnerability affecting confidentiality via unknown vectors related to the Supplier Portal; CVSS v2 base score 4.3 (MEDIUM...

CVE-2013-1536

Technical details for CVE-2013-1536 are not publicly available in the provided documents. No confirmed affected products, versions, vectors, or remediation are disclosed here; monitor for updates.

CVE-2014-0379

CVE-2014-0379 affects Oracle Demantra (Demantra 12.2.1). Connected documents indicate a stored XSS in TaskSender that could allow an authenticated user’s browser to execute script, potentially enabling session hijacking and data modification. Fixed in Demantra 12.2.3 per the packetstorm entry; Or...

CVE-2014-2459

CVE-2014-2459 is an unspecified vulnerability in Oracle Transportation Management (Oracle Supply Chain Products Suite 6.3.2/6.3.3) that could allow local attackers to affect confidentiality, integrity, and availability via unknown vectors. The connected Oracle CPU April 2014 advisories indicate t...

CVE-2015-4763

The CVE-2015-4763 entry concerns Oracle Agile PLM within Oracle Supply Chain Products Suite 9.3.4. The vulnerability is described as unspecified, allowing remote authenticated users to affect confidentiality and integrity via unknown vectors related to Security. Documented impact exists (CVE/NVD ...

CVE-2012-0565

Technical details for CVE-2012-0565 are not provided in the supplied documents. The entries describe an unspecified vulnerability in Oracle Agile within Oracle Supply Chain Products Suite, but no affected components, versions, vectors, or fixes are disclosed here. Monitor for updates.

CVE-2013-2441

Technical details about CVE-2013-2441 are not publicly available in the provided documents. Monitor for updates from Oracle CPU advisories and CVE references.

CVE-2013-5897

Technical details for CVE-2013-5897 are not publicly provided in the supplied documents. No concrete information on affected components, root cause, or remediation is present here. Monitor official advisories for updates.

CVE-2014-0372

Oracle Demantra (Demantra, Oracle) SQL Injection (CVE-2014-0372) affects version 12.2.1 and related 7.x/12.x lines; vulnerability is due to injectable queries in the Demantra application that could allow an attacker to extract credentials or modify content. Exploitation described as blind SQL inj...

CVE-2014-0399

CVE-2014-0399 affects Oracle Transportation Management in Oracle Supply Chain Products Suite versions 6.2, 6.3, 6.3.1, and 6.3.2. The flaw permits remote authenticated users to impact confidentiality via unknown vectors related to Data, Domain & Function Security. The description provides no root...

CVE-2014-0435

CVE-2014-0435 concerns an unspecified vulnerability in the Oracle Transportation Management component of Oracle Supply Chain Products Suite (versions 6.1, 6.2, 6.3, 6.3.1, 6.3.2). The issue allows remote authenticated users to affect availability via unknown vectors related to Data, Domain & Func...

CVE-2014-2457

Technical details about CVE-2014-2457 are not publicly available in the provided documents; monitor for updates.

CVE-2015-0368

CVE-2015-0368 affects the Oracle Transportation Management (OTM) component of Oracle Supply Chain Products Suite (versions 6.1–6.3.x). The connected sources describe an unspecified vulnerability that allows remote attackers to affect availability via unknown vectors related to Security. The exact...