Vulnerability Details : CVE-2012-3116
Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 5.5.06, 6.0, 6.1, and 6.2 allows local users to affect confidentiality via unknown vectors.
Exploit prediction scoring system (EPSS) score for CVE-2012-3116
Probability of exploitation activity in the next 30 days: 0.06%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 25 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2012-3116
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
1.9
|
LOW | AV:L/AC:M/Au:N/C:P/I:N/A:N |
3.4
|
2.9
|
NIST |
References for CVE-2012-3116
-
http://www.securitytracker.com/id?1027268
Oracle Supply Chain Products Suite Bugs Let Remote Users Partially Modify Data and Remote Authenticated Users Partially Access Data and Deny Service - SecurityTracker
-
http://www.oracle.com/technetwork/topics/security/cpujul2012-392727.html
Oracle Critical Patch Update - July 2012Vendor Advisory
-
http://www.securityfocus.com/bid/54567
Oracle Transportation Management CVE-2012-3116 Local Security Vulnerability
-
http://www.mandriva.com/security/advisories?name=MDVSA-2013:150
mandriva.com
-
https://exchange.xforce.ibmcloud.com/vulnerabilities/77023
Oracle Supply Chain Transportation Management information disclosure CVE-2012-3116 Vulnerability Report
-
http://osvdb.org/83960
Products affected by CVE-2012-3116
- cpe:2.3:a:oracle:supply_chain_products_suite:5.5.06:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:supply_chain_products_suite:6.0.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:supply_chain_products_suite:6.1.0:*:*:*:*:*:*:*
- cpe:2.3:a:oracle:supply_chain_products_suite:6.2.0:*:*:*:*:*:*:*