PT-2012-2680 · Oracle · Oracle Agile+1

Published 2012-05-03 · Updated 2016-05-18 · CVE-2012-0566

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Oracle Supply Chain Products Suite versions 5.2.2, 6.0.0, and 6.1.1

Description The issue affects the integrity of the system, allowing remote attackers to exploit it via unknown vectors related to the Supplier Portal in the Oracle Agile component.

Recommendations For Oracle Supply Chain Products Suite version 5.2.2, update to a version that addresses this issue. For Oracle Supply Chain Products Suite version 6.0.0, update to a version that addresses this issue. For Oracle Supply Chain Products Suite version 6.1.1, update to a version that addresses this issue.

Fix

Related Identifiers

CVE-2012-0566

Affected Products

Oracle Agile

Oracle Supply Chain Products Suite

References · 6

• http://oracle.com/technetwork/topics/security/cpuapr2012-366314.html · Vendor Advisory
• http://mandriva.com/security/advisories?name=MDVSA-2013:150 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-0566 · Security Note
• http://securityfocus.com/bid/53086 · Note
• http://secunia.com/advisories/48874 · Note
• http://securitytracker.com/id?1026937 · Note