Vulnerability Details CVE-2014-4234
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, and 6.3.4 allows remote attackers to affect confidentiality via unknown vectors related to Data, Domain & Function Security.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.006
EPSS Ranking 69.6%
CVSS Severity
CVSS v2 Score 5.0
References
- http://seclists.org/fulldisclosure/2014/Dec/23
- http://secunia.com/advisories/59322
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
- http://www.securityfocus.com/archive/1/534161/100/0/threaded
- http://www.securityfocus.com/bid/68643
- http://www.securitytracker.com/id/1030582
- http://www.vmware.com/security/advisories/VMSA-2014-0012.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94575
- http://seclists.org/fulldisclosure/2014/Dec/23
- http://secunia.com/advisories/59322
- http://www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
- http://www.securityfocus.com/archive/1/534161/100/0/threaded
- http://www.securityfocus.com/bid/68643
- http://www.securitytracker.com/id/1030582
- http://www.vmware.com/security/advisories/VMSA-2014-0012.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94575
Products affected by CVE-2014-4234
-
cpe:2.3:a:oracle:supply_chain_products_suite:6.1.0
-
cpe:2.3:a:oracle:supply_chain_products_suite:6.2.0
-
cpe:2.3:a:oracle:supply_chain_products_suite:6.3.0
-
cpe:2.3:a:oracle:supply_chain_products_suite:6.3.1
-
cpe:2.3:a:oracle:supply_chain_products_suite:6.3.2
-
cpe:2.3:a:oracle:supply_chain_products_suite:6.3.3
-
cpe:2.3:a:oracle:supply_chain_products_suite:6.3.4