CVE-2014-2458 — Oracle Supply Chain Products Suite vulnerability

5 documents4 sources
Severity
4.3MEDIUMNVD
EPSS
0.3%
top 45.64%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Oracle Supply Chain Products Suite
Timeline
PublishedApr 16
Latest updateMay 17

Description

Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6.1.0.3 and 6.1.1.3 allows remote attackers to affect integrity via unknown vectors related to Install.

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

▶NVDoracle/supply_chain_products_suite6.1.0.3, 6.1.1.3+1

🔴Vulnerability Details

4
GHSA
GHSA-9qqj-ph57-5qmh: Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6↗2022-05-17
▶
OSV
firefox regression↗2015-01-27
▶
OSV
ubufox update↗2015-01-14
▶
CVEList
CVE-2014-2458: Unspecified vulnerability in the Oracle Agile Product Lifecycle component in Oracle Supply Chain Products Suite 6↗2014-04-16
▶