cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2023-21850,https://securityvulnerability.io/vulnerability/CVE-2023-21850,Unauthorized Access Exploit in Oracle Demantra Demand Management,"An unauthenticated attacker can exploit a significant vulnerability in Oracle Demantra Demand Management, specifically within the E-Business Collections component. This loophole allows attackers with network access via HTTP to manipulate critical data without authorization. The security flaw spans supported versions 12.1 and 12.2, enabling unauthorized creation, deletion, or modification of essential data, posing serious risks to the integrity of the application.",Oracle,Demantra Demand Management,7.5,HIGH,0.0007699999841861427,false,false,false,false,,false,false,2023-01-18T00:15:00.000Z,0 CVE-2020-2557,https://securityvulnerability.io/vulnerability/CVE-2020-2557,,"Vulnerability in the Oracle Demantra Demand Management product of Oracle Supply Chain (component: Security). Supported versions that are affected are 12.2.4, 12.2.4.1, 12.2.5 and 12.2.5.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Demantra Demand Management. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle Demantra Demand Management, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Demantra Demand Management accessible data. CVSS 3.0 Base Score 4.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:L/A:N).",Oracle,Demantra Demand Management,4.7,MEDIUM,0.0008299999753944576,false,false,false,false,,false,false,2020-01-15T16:34:00.000Z,0 CVE-2019-2733,https://securityvulnerability.io/vulnerability/CVE-2019-2733,,"Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite (subcomponent: Product Security). The supported version that is affected is 7.3.1.5.2. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Demantra Demand Management. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Demantra Demand Management accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).",Oracle,Demantra Demand Management,4.3,MEDIUM,0.000539999979082495,false,false,false,false,,false,false,2019-07-23T23:15:00.000Z,0 CVE-2019-2732,https://securityvulnerability.io/vulnerability/CVE-2019-2732,,Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite (subcomponent: Product Security). The supported version that is affected is 7.3.1.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Demantra Demand Management. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Demantra Demand Management accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).,Oracle,Demantra Demand Management,5.3,MEDIUM,0.0008900000248104334,false,false,false,false,,false,false,2019-07-23T23:15:00.000Z,0 CVE-2018-3127,https://securityvulnerability.io/vulnerability/CVE-2018-3127,,"Vulnerability in the Oracle Demantra Demand Management component of Oracle Supply Chain Products Suite (subcomponent: Product Security). Supported versions that are affected are 7.3.5 and 12.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Demantra Demand Management. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Demantra Demand Management accessible data. CVSS 3.0 Base Score 4.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N).",Oracle,Demantra Demand Management,4.3,MEDIUM,0.0008200000156648457,false,false,false,false,,false,false,2018-10-17T01:00:00.000Z,0