CVE-2013-5877: Medium severity oracle supply chain products suite vulnerability

Published Jan 15, 2014

Updated

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, and 12.2.1 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.

Affected Software

5 affected components

Oracle Supply Chain Products Suite=7.2.0.3

Oracle Supply Chain Products Suite Sql-server=7.3.0

Oracle Supply Chain Products Suite Sql-server=7.3.1

Oracle Supply Chain Products Suite Sql-server=12.2.0

Oracle Supply Chain Products Suite Sql-server=12.2.1

Event History

Jan 15, 2014

CVE Published

via MITRE·12:30 AM

Data Sourced

via MITRE·12:30 AM

Description

Frequently Asked Questions

What is the severity of CVE-2013-5877?

CVE-2013-5877 has not been assigned a specific severity level, but it allows remote attackers to affect confidentiality.

How do I fix CVE-2013-5877?

To mitigate CVE-2013-5877, Oracle recommends applying the latest available patches for affected versions of the Supply Chain Products Suite.

Which versions are affected by CVE-2013-5877?

CVE-2013-5877 affects Oracle Supply Chain Products Suite versions 7.2.0.3, 7.3.0, 7.3.1, 12.2.0, and 12.2.1.

What types of attacks does CVE-2013-5877 allow?

CVE-2013-5877 allows remote attackers to exploit an unspecified vulnerability that can potentially impact confidentiality.

Is there a workaround for CVE-2013-5877?

Currently, Oracle's recommendation is to update to the latest version as there are no documented workarounds for CVE-2013-5877.