Unscored severity · published Oct 17, 2012
CVE-2012-5091
Unspecified vulnerability in the Oracle Agile Product Supplier Collaboration for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote attackers…
–
CVSS
1.3%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle Agile Product Supplier Collaboration for Process component in Oracle Supply Chain Products Suite 5.2.2 and 6.1.0.0 allows remote attackers to affect confidentiality via unknown vectors related to Supplier Portal.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Supply Chain Products Suite · Oracle
5.2.2; 6.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5091
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5091
osvdb.org
http://osvdb.org/86380
secunia.com
http://secunia.com/advisories/50999
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpuoct2012-1515893.html
More from Supply Chain Products Suite
7.5
CVE-2026-21940
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group)
6.5
CVE-2015-1793
The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during…
–
CVE-2015-4924
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect…
–
CVE-2015-4917
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect integrity via unknown vectors…
–
CVE-2015-4892
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect integrity via unknown vectors…