Oracle Supply Chain Products Suite vulnerabilities

97 CVEs affecting Oracle Supply Chain Products Suite, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-21940, published 2026-01-20.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2013-5880, published 2014-01-15. Medium severity, CVSS 5.0. EPSS: 59.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect confidentiality via…
CVE-2013-5795, published 2014-01-15. Medium severity, CVSS 5.0. EPSS: 59.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, 12.2.2, and 12.2.3 allows remote attackers…
CVE-2012-0549, published 2012-05-03. High severity, CVSS 7.5. EPSS: 59% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle AutoVue Office component in Oracle Supply Chain Products Suite 20.1.1 allows remote attackers to affect confidentiality, integrity, and availability, related…
CVE-2015-1793, published 2015-07-09. Medium severity, CVSS 6.5. EPSS: 58.4% chance of exploitation in the next 30 days. The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative…
CVE-2013-5877, published 2014-01-15. Medium severity, CVSS 5.0. EPSS: 55% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, and 12.2.1 allows remote attackers to…
CVE-2014-0372, published 2014-01-15. Medium severity, CVSS 5.5. EPSS: 8.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, and 12.2.2 allows remote authenticated…
CVE-2014-0379, published 2014-01-15. Medium severity, CVSS 4.3. EPSS: 7.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0.x, 7.3.1.x, 12.2.0, 12.2.1, and 12.2.2 allows remote…
CVE-2014-4234, published 2014-07-17. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, and 6.3.4 allows remote attackers to affect…
CVE-2015-2570, published 2015-04-16. Medium severity, CVSS 6.5. EPSS: 2.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Demand Planning component in Oracle Supply Chain Products Suite 11.5.10, 12.0, 12.1, and 12.2 allows remote authenticated users to affect confidentiality,…
CVE-2012-0580, published 2012-05-03. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attackers to affect integrity via unknown vectors…

Latest

CVE-2026-21940, published 2026-01-20. High severity, CVSS 7.5. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: User and User Group). The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows…
CVE-2015-4924, published 2016-01-21. Low severity, CVSS 3.5. EPSS: 1.1% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.1.1, 9.3.1.2, 9.3.2, and 9.3.3 allows remote authenticated users to affect integrity via vectors…
CVE-2015-4917, published 2015-10-22. Low severity, CVSS 3.5. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect integrity via unknown vectors related to Security,…
CVE-2015-4892, published 2015-10-21. Low severity, CVSS 3.5. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect integrity via unknown vectors related to Security,…
CVE-2015-4848, published 2015-10-21. Medium severity, CVSS 5.0. EPSS: 1.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality via unknown…
CVE-2015-4847, published 2015-10-21. Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect integrity via vectors related…
CVE-2015-4824, published 2015-10-21. Low severity, CVSS 2.1. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect confidentiality via unknown vectors related to…
CVE-2015-4797, published 2015-10-21. Low severity, CVSS 3.5. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.3 allows remote authenticated users to affect integrity via unknown vectors related to Security.
CVE-2015-4768, published 2015-07-16. Medium severity, CVSS 4.0. EPSS: 1.7% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, and 6.3.7 allows remote…
CVE-2015-4763, published 2015-07-16. Low severity, CVSS 3.6. EPSS: 1.4% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Agile PLM component in Oracle Supply Chain Products Suite 9.3.4 allows remote authenticated users to affect confidentiality and integrity via unknown vectors…