CVE-2015-0422

EUVD-2015-0435
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, and 6.3.5 allows remote authenticated users to affect confidentiality via unknown vectors related to UI Infrastructure.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
4 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:S/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 49%
Affected Products (NVD)
VendorProductVersion
oraclesupply_chain_products_suite
6.1.0
oraclesupply_chain_products_suite
6.2.0
oraclesupply_chain_products_suite
6.3.0
oraclesupply_chain_products_suite
6.3.1
oraclesupply_chain_products_suite
6.3.2
oraclesupply_chain_products_suite
6.3.3
oraclesupply_chain_products_suite
6.3.4
oraclesupply_chain_products_suite
6.3.5
𝑥
= Vulnerable software versions
References
http://secunia.com/advisories/62506
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
http://www.securityfocus.com/bid/72127
http://www.securitytracker.com/id/1031576
https://exchange.xforce.ibmcloud.com/vulnerabilities/100108
http://secunia.com/advisories/62506
http://www.oracle.com/technetwork/topics/security/cpujan2015-1972971.html
http://www.securityfocus.com/bid/72127
http://www.securitytracker.com/id/1031576
https://exchange.xforce.ibmcloud.com/vulnerabilities/100108