CVE-2013-5877

Mode C: CVE-2013-5877 affects Oracle Demantra Demantra/GraphServlet components across multiple 7.x and 12.2.x versions of Oracle Supply Chain Products Suite (including 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, 12.2.1). Public details in connected sources describe an arbitrary file retrieval/local...

CVE-2014-0371

CVE-2014-0371 relates to Oracle Demantra Demantra 12.2.1. The connected PacketStorm entry documents a Reflective Cross‑Site Scripting (XSS) vulnerability affecting Oracle Demantra 12.2.1, with a fix in 12.2.3. The exploit path involves crafted input in Demantra web pages such as editExecDefinitio...

CVE-2013-5795

Oracle Demantra has a backend Database Credentials Leak vulnerability (CVE-2013-5795) affecting Demantra Demand Management within Oracle Supply Chain Products Suite (versions including 12.2.1, 12.2.2, 12.2.3 and related 7.x/SQL-Server lines). The issue enables an attacker to retrieve database ins...

CVE-2014-0372

Oracle Demantra (Demantra, Oracle) SQL Injection (CVE-2014-0372) affects version 12.2.1 and related 7.x/12.x lines; vulnerability is due to injectable queries in the Demantra application that could allow an attacker to extract credentials or modify content. Exploitation described as blind SQL inj...

CVE-2014-0379

CVE-2014-0379 affects Oracle Demantra (Demantra 12.2.1). Connected documents indicate a stored XSS in TaskSender that could allow an authenticated user’s browser to execute script, potentially enabling session hijacking and data modification. Fixed in Demantra 12.2.3 per the packetstorm entry; Or...