Unscored severity · published Oct 15, 2014
CVE-2014-6498
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, 6.3.4, and 6.3.5 allows…
–
CVSS
1.4%
EPSS
No
On KEV
Description
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, 6.3.4, and 6.3.5 allows remote attackers to affect confidentiality via unknown vectors related to Security.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.4% · higher than 73% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SC
Supply Chain Products Suite · Oracle
6.1.0; 6.2.0; 6.3.0; 6.3.1; 6.3.2; 6.3.3; +2 more · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-6498
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-6498
secunia.com
http://secunia.com/advisories/61721
Patch
http://www.oracle.com/technetwork/topics/security/cpuoct2014-1972960.html
www.securityfocus.com
http://www.securityfocus.com/bid/70542
www.securitytracker.com
http://www.securitytracker.com/id/1031043
More from Supply Chain Products Suite
7.5
CVE-2026-21940
Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group)
6.5
CVE-2015-1793
The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during…
–
CVE-2015-4924
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect…
–
CVE-2015-4917
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect integrity via unknown vectors…
–
CVE-2015-4892
Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect integrity via unknown vectors…