CVE-2014-0372 Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, and 12.2.2 allows remote authenticated user...
MediumCVSS 5.5
EPSS 8.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, and 12.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to DM Others.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| oracle supply chain products suite | = 7.2.0.3 | No fix listed |
| oracle supply chain products suite sql-server | = 7.3.0 | No fix listed |
| oracle supply chain products suite sql-server | = 7.3.1 | No fix listed |
| oracle supply chain products suite sql-server | = 12.2.0 | No fix listed |
| oracle supply chain products suite sql-server | = 12.2.1 | No fix listed |
| oracle supply chain products suite sql-server | = 12.2.2 | No fix listed |
References
- 102103 vdb-entry
- 56474 third-party-advisory
- 31993 exploit
- www.oracle.com vendor-advisory
- 20140228 CVE-2014-0372 - SQL Injection in Oracle Demantra mailing-list
- 64758 vdb-entry
- 64826 vdb-entry
- 1029620 vdb-entry