Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

Oracle Supply Chain Suite could let attackers see private data

CVE-2012-5094 · published 14 years ago
Summary

The Agile PLM for Process part of Oracle Supply Chain Products Suite versions 5.2.2 and 6.1.0.0 can be accessed from outside the network, allowing an attacker to view information that should be confidential. This risk is linked to how user groups are managed. Apply the latest security updates from Oracle or restrict remote access to the affected component.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
oracle supply_chain_products_suite 5.2.2
6.1.0
cpe:2.3:a:oracle:supply_chain_products_suite:5.2.2:*:*:*:*:*:*:*
Original advisory text
Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote attackers to affect confidentiality via unknown vectors...
Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote attackers to affect confidentiality via unknown vectors related to User Group Management.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
1% chance of attack within 30 days
Timeline
Published17 Oct 2012
Updated31 Oct 2026
First seen29 Sep 2026
Sources
CVE-2012-5094 · NVD
Track software like this
Free during beta