CVE-2012-3140: Medium severity oracle supply chain products suite vulnerability

Published Oct 16, 2012

Updated

Unspecified vulnerability in the Oracle Agile PLM For Process component in Oracle Supply Chain Products Suite 6.0.0.6.3 and 6.1.0.1.14 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Supply Chain Relationship Management.

Affected Software

2 affected components

Oracle Supply Chain Products Suite=6.0.0.6.3

Oracle Supply Chain Products Suite=6.1.0.1.14

Remediation

Patch Available

http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html

Event History

Oct 16, 2012

CVE Published

via MITRE·11:00 PM

Data Sourced

via MITRE·11:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2012-3140?

CVE-2012-3140 is rated as having a moderate severity level, affecting confidentiality and integrity.

How do I fix CVE-2012-3140?

To fix CVE-2012-3140, apply the security updates provided by Oracle for the affected versions of Oracle Supply Chain Products Suite.

What versions of Oracle Supply Chain Products Suite are affected by CVE-2012-3140?

CVE-2012-3140 affects Oracle Supply Chain Products Suite versions 6.0.0.6.3 and 6.1.0.1.14.

Can CVE-2012-3140 be exploited remotely?

Yes, CVE-2012-3140 can be exploited by remote authenticated users under certain conditions.

What components are involved in CVE-2012-3140?

CVE-2012-3140 involves the Oracle Agile PLM For Process component within the Oracle Supply Chain Products Suite.