CVE-2013-5795

Oracle Demantra Demand Management - Info Disclosure

Title source: llm

Description

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, 12.2.2, and 12.2.3 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.

Exploits (2)

exploitdb WRITEUP VERIFIED

by Portcullis · textwebappswindows

https://www.exploit-db.com/exploits/31995

View Code ZIP pw:eip

metasploit WORKING POC

by Oliver Gruskovnjak · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/oracle_demantra_database_credentials_leak.rb

View Code ZIP pw:eip

References (6)

[Third Party Advisory, VDB Entry] http://osvdb.org/102096

[Vendor Advisory] http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1029620

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/64758

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/64846

[Third Party Advisory] http://secunia.com/advisories/56474

Scores

EPSS 0.7595

EPSS Percentile 98.9%

Details

Status published

Products (6)

oracle/supply_chain_products_suite 7.2.0.3

oracle/supply_chain_products_suite_sql-server 7.3.0

oracle/supply_chain_products_suite_sql-server 7.3.1

oracle/supply_chain_products_suite_sql-server 12.2.1

oracle/supply_chain_products_suite_sql-server 12.2.2

oracle/supply_chain_products_suite_sql-server 12.2.3

Published Jan 15, 2014

Tracked Since Feb 18, 2026