CVE-2014-2460: Medium severity Oracle Supply Chain Products Suite vulnerability

Published Apr 16, 2014

Updated

Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, 6.2, 6.3, 6.3.1, 6.3.2, and 6.3.3 allows remote authenticated users to affect confidentiality via vectors related to CSV Management.

Affected Software

8 affected components

Oracle Supply Chain Products Suite=5.5.06

Oracle Supply Chain Products Suite=6.0.0

Oracle Supply Chain Products Suite=6.1.0

Oracle Supply Chain Products Suite=6.1.2.0

Oracle Supply Chain Products Suite=6.3.0

Oracle Supply Chain Products Suite=6.3.1

Oracle Supply Chain Products Suite=6.3.2

Oracle Supply Chain Products Suite=6.3.3

Event History

Apr 16, 2014

CVE Published

via MITRE·02:05 AM

Data Sourced

via MITRE·02:05 AM

Description

Data Sourced

via NVD·02:55 AM

DescriptionSeverityAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-2460?

CVE-2014-2460 is considered to have a medium severity rating, allowing potential impact on confidentiality.

Who is affected by CVE-2014-2460?

CVE-2014-2460 affects remote authenticated users of Oracle Transportation Management within several versions of Oracle Supply Chain Products Suite.

How do I fix CVE-2014-2460?

To mitigate CVE-2014-2460, it is recommended to apply the latest security patches provided by Oracle for affected versions.

What are the affected versions in CVE-2014-2460?

CVE-2014-2460 affects Oracle Supply Chain Products Suite versions 5.5.06, 6.0, 6.1, 6.2, 6.3, 6.3.1, 6.3.2, and 6.3.3.

What type of vulnerability is CVE-2014-2460?

CVE-2014-2460 is an unspecified vulnerability related to CSV management that affects confidentiality.