Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
4.3
CVSSv2

CVE-2014-0379

Published: 15/01/2014 Updated: 08/11/2017
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Subscribe to Supply Chain Products Suite

Vulnerability Summary

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0.x, 7.3.1.x, 12.2.0, 12.2.1, and 12.2.2 allows remote malicious users to affect integrity via unknown vectors related to DM Others.

Vulnerable Product Search on Vulmon Subscribe to Product

oracle supply chain products suite 7.2.0.3

oracle supply chain products suite sql-server 7.3.0

oracle supply chain products suite sql-server 12.2.1

oracle supply chain products suite sql-server 12.2.2

oracle supply chain products suite sql-server 7.3.1

oracle supply chain products suite sql-server 12.2.0

Exploits

Exploit DB: Oracle Demantra 12.2.1 - Persistent Cross-Site Scripting
Details: The TaskSender area is vulnerable to a stored cross-site scripting vulnerability Impact: An attacker could exploit this flaw to get active HTML or script code executed in an authenticated user’s browser Cross-site Scripting may be used to perform attacks such as session hijacking by invoking the user’s browser to send information s ...
Exploit DB: Oracle Demantra 12.2.1 Stored Cross Site Scripting
Oracle Demantra version 1221 suffers from a stored cross site scripting vulnerability ...

References

NVD-CWE-noinfohttp://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.htmlhttp://www.securityfocus.com/bid/64758http://www.securitytracker.com/id/1029620http://secunia.com/advisories/56474http://www.securityfocus.com/bid/64857http://osvdb.org/102097http://www.exploit-db.com/exploits/31994https://nvd.nist.govhttps://www.exploit-db.com/exploits/31994/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-38298CVE-2024-20356CVE-2023-21987CVE-2024-33217bypassCVE-2024-31804CVE-2024-32660unauthorizedSSRF
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook