CVE-2013-5877

Oracle Demantra Demand Management <12.2.1 - Info Disclosure

Title source: llm

Description

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, and 12.2.1 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.

Exploits (2)

exploitdb WORKING POC VERIFIED

by Portcullis · textwebappswindows

https://www.exploit-db.com/exploits/31992

View Code ZIP pw:eip

metasploit WORKING POC

by Oliver Gruskovnjak · rubypoc

https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/oracle_demantra_file_retrieval.rb

View Code ZIP pw:eip

References (6)

[Vendor Advisory] http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/64758

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/64831

[Third Party Advisory, VDB Entry] http://osvdb.org/102094

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1029620

[Third Party Advisory] http://secunia.com/advisories/56474

Scores

EPSS 0.7885

EPSS Percentile 99.1%

Details

Status published

Products (5)

oracle/supply_chain_products_suite 7.2.0.3

oracle/supply_chain_products_suite_sql-server 7.3.0

oracle/supply_chain_products_suite_sql-server 7.3.1

oracle/supply_chain_products_suite_sql-server 12.2.0

oracle/supply_chain_products_suite_sql-server 12.2.1

Published Jan 15, 2014

Tracked Since Feb 18, 2026