CVE-2014-0372
First published: Wed Jan 15 2014(Updated: )
Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, and 12.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to DM Others.
Credit: secalert_us@oracle.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oracle Supply Chain Products Suite | =7.2.0.3 | |
| Oracle Supply Chain Products Suite | =7.3.0 | |
| Oracle Supply Chain Products Suite | =7.3.1 | |
| Oracle Supply Chain Products Suite | =12.2.0 | |
| Oracle Supply Chain Products Suite | =12.2.1 | |
| Oracle Supply Chain Products Suite | =12.2.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://osvdb.org/102103
- http://secunia.com/advisories/56474
- http://www.exploit-db.com/exploits/31993
- http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html
- http://www.securityfocus.com/archive/1/531316/100/0/threaded
- http://www.securityfocus.com/bid/64758
- http://www.securityfocus.com/bid/64826
- http://www.securitytracker.com/id/1029620
Frequently Asked Questions
What is the severity of CVE-2014-0372?
CVE-2014-0372 has not been classified publicly with a specific severity score, but it impacts the confidentiality and integrity of information.
How do I fix CVE-2014-0372?
To fix CVE-2014-0372, it is recommended to apply the latest patches provided by Oracle for affected versions of the Supply Chain Products Suite.
Who is affected by CVE-2014-0372?
CVE-2014-0372 affects remote authenticated users of Oracle Supply Chain Products Suite versions 7.2.0.3, 7.3.0, 7.3.1, 12.2.1, and 12.2.2.
What types of attacks can CVE-2014-0372 enable?
CVE-2014-0372 could potentially enable unauthorized access to sensitive data or alteration of integrity due to its unspecified vulnerability vectors.
When was CVE-2014-0372 reported?
CVE-2014-0372 was reported in 2014, and its details have since raised concerns regarding security in Oracle's Supply Chain Products.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/oracle
- canonical/oracle supply chain products suite
- version/oracle supply chain products suite/7.2.0.3
- version/oracle supply chain products suite/7.3.0
- version/oracle supply chain products suite/7.3.1
- version/oracle supply chain products suite/12.2.0
- version/oracle supply chain products suite/12.2.1
- version/oracle supply chain products suite/12.2.2