CVE-2014-0372: Medium severity Oracle Supply Chain Products Suite vulnerability

Published Jan 15, 2014

Updated

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, and 12.2.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to DM Others.

Affected Software

6 affected components

Oracle Supply Chain Products Suite=7.2.0.3

Oracle Supply Chain Products Suite Sql-server=7.3.0

Oracle Supply Chain Products Suite Sql-server=7.3.1

Oracle Supply Chain Products Suite Sql-server=12.2.0

Oracle Supply Chain Products Suite Sql-server=12.2.1

Oracle Supply Chain Products Suite Sql-server=12.2.2

Event History

Jan 15, 2014

CVE Published

via MITRE·01:33 AM

Data Sourced

via MITRE·01:33 AM

Description

Data Sourced

via NVD·04:08 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-0372?

CVE-2014-0372 has not been classified publicly with a specific severity score, but it impacts the confidentiality and integrity of information.

How do I fix CVE-2014-0372?

To fix CVE-2014-0372, it is recommended to apply the latest patches provided by Oracle for affected versions of the Supply Chain Products Suite.

Who is affected by CVE-2014-0372?

CVE-2014-0372 affects remote authenticated users of Oracle Supply Chain Products Suite versions 7.2.0.3, 7.3.0, 7.3.1, 12.2.1, and 12.2.2.

What types of attacks can CVE-2014-0372 enable?

CVE-2014-0372 could potentially enable unauthorized access to sensitive data or alteration of integrity due to its unspecified vulnerability vectors.

When was CVE-2014-0372 reported?

CVE-2014-0372 was reported in 2014, and its details have since raised concerns regarding security in Oracle's Supply Chain Products.