Every CVE Search/ Get API key

CVE-2014-0379

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply...

4.3 MediumPublic exploit

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0.x, 7.3.1.x, 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect integrity via unknown vectors related to DM Others.

Exploit likelihood

7.24%Down 6.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0.x, 7.3.1.x, 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect integrity via unknown vectors related to DM Others.

Record
CVE-2014-0379
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:N/I:P/A:N
Updated
2026-11-02
CVE List No score

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0.x, 7.3.1.x, 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect integrity via unknown vectors related to DM Others.

Record
CVE-2014-0379
Updated
2026-11-02
EUVDEUVD-2014-0417 No score

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0.x, 7.3.1.x, 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect integrity via unknown vectors related to DM Others.

Record
EUVD-2014-0417
Updated
2026-11-03
GitHub AdvisoriesGHSA-7p47-f23x-wmrw No score

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply...

Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0.x, 7.3.1.x, 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect integrity via unknown vectors related to DM Others.

Record
GHSA-7p47-f23x-wmrw
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBOracle Demantra 12.2.1 - Persistent Cross-Site Scripting2014-03-01

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2014-0379 is a medium vulnerability (CVSS 4.3) in Oracle Supply Chain Products Suite, published January 15, 2014. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.24%, the 94th percentile. No source names a fixed version.

References

MoveEnter Open