{"id":"CVE-2013-5880","aliases":["EUVD-2013-5714","GHSA-jc9r-hmmh-3m35"],"status":"published","title":"Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply...","description":"Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.59558,"percentile":0.99131,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2014-01-15T00:30:00Z","modified":"2026-06-16T23:59:39Z","exploits":[{"source":"exploitdb","id":"EDB-39018","title":"Oracle Supply Chain Products Suite - Remote Security","type":"remote","platform":"multiple","date":"2014-01-14","verified":true,"url":"https://www.exploit-db.com/exploits/39018"},{"source":"metasploit","id":"auxiliary/scanner/http/oracle_demantra_database_credentials_leak","title":"Oracle Demantra Database Credentials Leak","type":"auxiliary","date":"2014-02-28","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/http/oracle_demantra_database_credentials_leak"},{"source":"metasploit","id":"auxiliary/scanner/http/oracle_demantra_file_retrieval","title":"Oracle Demantra Arbitrary File Retrieval with Authentication Bypass","type":"auxiliary","date":"2014-02-28","verified":true,"url":"https://www.rapid7.com/db/modules/auxiliary/scanner/http/oracle_demantra_file_retrieval"}],"products":[{"vendor":"oracle","product":"supply_chain_products_suite"}],"references":[{"url":"http://osvdb.org/102095","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"]},{"url":"http://www.securitytracker.com/id/1029620","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"http://secunia.com/advisories/56474","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://www.securityfocus.com/bid/64836","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securityfocus.com/bid/64758","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpujan2014-1972949.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2013-5880"},{"url":"https://github.com/advisories/GHSA-jc9r-hmmh-3m35"}],"sources":{"cve":[{"id":"CVE-2013-5880","description":"Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.","status":"published","published":"2014-01-15T00:30:00Z","modified":"2024-08-06T17:22:31.282Z","updated_at":"2026-11-02T14:34:55.508771Z"}],"euvd":[{"id":"EUVD-2013-5714","description":"Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.","status":"published","published":"2014-01-15T00:30:00Z","modified":"2024-08-06T17:22:31Z","updated_at":"2026-11-03T01:56:27.6803Z"}],"ghsa":[{"id":"GHSA-jc9r-hmmh-3m35","title":"Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply...","description":"Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.","status":"published","published":"2022-05-17T04:53:22Z","modified":"2023-01-28T05:02:51Z","updated_at":"2026-11-02T14:43:51.685777Z"}],"nvd":[{"id":"CVE-2013-5880","description":"Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors related to DM Others.","status":"published","published":"2014-01-15T16:11:05.223Z","modified":"2026-06-16T23:59:39.493Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:02:48.062712Z"}]}}