Unscored severity · published Apr 16, 2014
CVE-2014-2460
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, 6.2, 6.3, 6.3.1, 6.3.2, and 6.3.3 allows remote…
–
CVSS
1%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, 6.2, 6.3, 6.3.1, 6.3.2, and 6.3.3 allows remote authenticated users to affect confidentiality via vectors related to CSV Management.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 62% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Supply Chain Products Suite · Oracle
5.5.06; 6.0.0; 6.1.0; 6.1.2.0; 6.3.0; 6.3.1; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-2460
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-2460
Vendor Advisory
http://www.oracle.com/technetwork/topics/security/cpuapr2014-1972952.html
More from Supply Chain Products Suite
7.5
CVE-2026-21940
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group)
6.5
CVE-2015-1793
The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during…
–
CVE-2015-4924
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect…
–
CVE-2015-4917
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect integrity via unknown vectors…
–
CVE-2015-4892
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect integrity via unknown vectors…