Supply Chain Products Suite vulnerabilitiesRanked by how likely they are to be used.

Product55 versions
The short answer

Supply Chain Products Suite is made by Oracle. We track 96 published vulnerabilities listed under that exact name, across 55 versions. None of them is on the list of flaws known to be exploited today. Oracle lists newer releases under their own names, such as Supply Chain Products Suite SQL-Server, so check those pages too.

See the riskiest flaws

We keep watching the known-exploited list.

Other names

Is Supply Chain Products Suite listed under other names? Yes.

Oracle also lists Supply Chain Products Suite under more specific names, such as Supply Chain Products Suite SQL-Server. Flaws listed only under those names are counted on their own pages, not here. If you run one of these, open its page for its own exploited flaws.

Known exploited

Which Supply Chain Products Suite vulnerabilities are being exploited?

This is the list that matters most: flaws criminals are using now.

None of Supply Chain Products Suite's published vulnerabilities is on the list of flaws known to be exploited today. We keep watching that list.

Exploit likelihood

Which Supply Chain Products Suite flaws are most likely to be used?

Ranked by the latest exploit-likelihood forecast: the chance each flaw is used in an attack in the next 30 days. A high severity score on its own doesn't tell you that. Flaws shared by many other makers' products are left out.

50% or more10% to 49%Under 10%
  1. 60%

    Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect confidentiality via unknown vectors...

    CVSS5.0Published15 Jan 2014
  2. 59%

    Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, 12.2.2, and 12.2.3 allows remote attackers to affect...

    CVSS5.0Published15 Jan 2014
  3. 59%

    Unspecified vulnerability in the Oracle AutoVue Office component in Oracle Supply Chain Products Suite 20.1.1 allows remote attackers to affect confidentiality, integrity, and availability, related to Desktop API.

    CVSS7.5Published3 May 2012
  4. 58%

    The X509_verify_cert function in crypto/x509/x509_vfy.c in OpenSSL 1.0.1n, 1.0.1o, 1.0.2b, and 1.0.2c does not properly process X.509 Basic Constraints cA values during identification of alternative certificate...

    CVSS6.5Published9 Jul 2015
  5. 55%

    Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.0, and 12.2.1 allows remote attackers to affect...

    CVSS5.0Published15 Jan 2014
  6. 8.8%

    Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0, 7.3.1, 12.2.1, and 12.2.2 allows remote authenticated users to affect...

    CVSS5.5Published15 Jan 2014
  7. 7.2%

    Unspecified vulnerability in the Oracle Demantra Demand Management component in Oracle Supply Chain Products Suite 7.2.0.3 SQL-Server, 7.3.0.x, 7.3.1.x, 12.2.0, 12.2.1, and 12.2.2 allows remote attackers to affect...

    CVSS4.3Published15 Jan 2014
  8. 2.5%

    Unspecified vulnerability in the Oracle Transportation Management component in Oracle Supply Chain Products Suite 6.1, 6.2, 6.3, 6.3.1, 6.3.2, 6.3.3, and 6.3.4 allows remote attackers to affect confidentiality via...

    CVSS5.0Published17 Jul 2014
  9. 2.4%

    Unspecified vulnerability in the Oracle Demand Planning component in Oracle Supply Chain Products Suite 11.5.10, 12.0, 12.1, and 12.2 allows remote authenticated users to affect confidentiality, integrity, and...

    CVSS6.5Published16 Apr 2015
  10. 2.1%

    Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attackers to affect integrity via unknown vectors related to...

    CVSS5.0Published3 May 2012
Precursor Intelligence

Running Supply Chain Products Suite? We'll keep checking.

Looking flaws up one at a time doesn't scale. Tell us what you run once, and we tell you which flaws matter to you, in what order, and keep watching for new ones.

  1. Tell us what you runPick your software from a list, or let us work it out from your website.
  2. We match it to every flawOver 400,000 published flaws, checked against your list.
  3. Ranked by real-world riskA 0 to 100 score, led by evidence criminals are using it.
  4. Told as soon as we knowAn alert by email, in the app or by webhook to your own tools.

Free plan, no card needed. Nothing to install.

FAQ

Common questions, answered plainly.

Something else? Talk to the team →

We track 96 published vulnerabilities listed under the name Supply Chain Products Suite, across 55 versions.

None of Supply Chain Products Suite's vulnerabilities is on the list of flaws known to be exploited today.

Oracle also lists Supply Chain Products Suite under more specific names, such as Supply Chain Products Suite SQL-Server. Flaws listed only under those names are counted on their own pages, not here. Open the release you run to see its own list.

Create a Precursor Intelligence account and track Supply Chain Products Suite. We match it against every published flaw, give each one a risk score from 0 to 100 and keep watching, so you hear about new ones as soon as we know, by email, in the app or by webhook.