Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Unspecified vulnerability in the Oracle Configurator component in Oracle Supply Chain Products Suite 12.0.6, 12.1, and 12.2 allows remote attackers to affect confidentiality and integrity via vectors related to JRAD Heartbeat. NOTE: the previous information is from the April 2016 CPU. Oracle has not commented on third-party claims that that this issue involves multiple cross-site scripting (XSS) vulnerabilities, which allow remote attackers to inject arbitrary web script or HTML via three unspecified parameters in an unknown JSP file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Oracle Supply Chain Products Suite Configurator组件安全漏洞
Vulnerability Description
Oracle Supply Chain Products Suite是美国甲骨文（Oracle）公司的一套供应链解决方案，该方案提供价值链计划、价值链执行、产品生命周期管理等功能。Oracle Configurator是其中的一个集成了订单管理、报价和销售的配置组件。 Oracle Supply Chain Products Suite 12.1版本和12.2版本的Oracle Configurator组件中的JRAD Heartbeat子组件存在安全漏洞。远程攻击者可利用该漏洞访问、更新、插入或删除数据
CVSS Information
N/A
Vulnerability Type
N/A