Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2013-5877Oracle Supply Chain Products Suite vulnerability

5 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
78.9%
top 0.95%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Timeline
PublishedJan 15
Latest updateMay 17

Description

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, and 12.2.1 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-vm6g-5mx7-297q: Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 72022-05-17
CVEList
CVE-2013-5877: Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 72014-01-15

💥Exploits & PoCs

2
Exploit-DB
Oracle Demantra 12.2.1 - Arbitrary File Disclosure2014-03-01
Exploit-DB
Nero MediaHome 4.5.8.0 - Denial of Service2013-01-10
CVE-2013-5877 — Oracle vulnerability | cvebase