Public exploit available

Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2013-5880 — Oracle Supply Chain Products Suite vulnerability

4 documents4 sources

Severity

5.0MEDIUMNVD

EPSS

82.4%

top 0.77%

CISA KEV

Not in KEV

Exploit

PoC available

Public exploit / PoC exists

Affected products

Oracle Supply Chain Products Suite

Timeline

PublishedJan 15

Latest updateMay 17

Description

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDoracle/supply_chain_products_suite12.2.0, 12.2.1, 12.2.2+2

🔴Vulnerability Details

GHSA

GHSA-jc9r-hmmh-3m35: Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12↗2022-05-17

▶

CVEList

CVE-2013-5880: Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12↗2014-01-15

▶

💥Exploits & PoCs

Exploit-DB

Oracle Supply Chain Products Suite - Remote Security↗2014-01-14

▶