{"api_version":"1","generated_at":"2026-07-23T06:48:30+00:00","cve":"CVE-2012-0580","urls":{"html":"https://cve.report/CVE-2012-0580","api":"https://cve.report/api/cve/CVE-2012-0580.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2012-0580","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2012-0580"},"summary":{"title":"CVE-2012-0580","description":"Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attackers to affect integrity via unknown vectors related to Supplier Portal.","state":"PUBLISHED","assigner":"oracle","published_at":"2012-05-03 22:55:01","updated_at":"2026-04-29 01:13:23"},"problem_types":["NVD-CWE-noinfo","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"}}],"references":[{"url":"http://www.securitytracker.com/id?1026937","name":"http://www.securitytracker.com/id?1026937","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Supply Chain Products Suite Bugs Let Remote Users Partially Deny Service, Access Data, and Modify Data - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html","name":"http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Oracle Critical Patch Update - April 2012","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/53085","name":"http://www.securityfocus.com/bid/53085","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Oracle Supply Chain Products Suite CVE-2012-0580 Remote Oracle Agile PLM for Process Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://secunia.com/advisories/48853","name":"http://secunia.com/advisories/48853","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Security Advisory SA48853 - Oracle Agile PLM for Process Unspecified Vulnerability - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","name":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Support / Security / Advisories /  / MDVSA-2013:150 | Mandriva","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2012-0580","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2012-0580","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2012","cve_id":"580","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"supply_chain_products_suite","cpe6":"5.2.2","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"580","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"supply_chain_products_suite","cpe6":"6.0.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2012","cve_id":"580","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"oracle","cpe5":"supply_chain_products_suite","cpe6":"6.1.1","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-06T18:30:53.377Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"48853","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/48853"},{"name":"53085","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/53085"},{"tags":["x_refsource_CONFIRM","x_transferred"],"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html"},{"name":"1026937","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://www.securitytracker.com/id?1026937"},{"name":"MDVSA-2013:150","tags":["vendor-advisory","x_refsource_MANDRIVA","x_transferred"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2012-04-17T00:00:00.000Z","descriptions":[{"lang":"en","value":"Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attackers to affect integrity via unknown vectors related to Supplier Portal."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2017-12-06T21:57:01.000Z","orgId":"43595867-4340-4103-b7a2-9a5208d29a85","shortName":"oracle"},"references":[{"name":"48853","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/48853"},{"name":"53085","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/53085"},{"tags":["x_refsource_CONFIRM"],"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html"},{"name":"1026937","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://www.securitytracker.com/id?1026937"},{"name":"MDVSA-2013:150","tags":["vendor-advisory","x_refsource_MANDRIVA"],"url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"secalert_us@oracle.com","ID":"CVE-2012-0580","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attackers to affect integrity via unknown vectors related to Supplier Portal."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"48853","refsource":"SECUNIA","url":"http://secunia.com/advisories/48853"},{"name":"53085","refsource":"BID","url":"http://www.securityfocus.com/bid/53085"},{"name":"http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html","refsource":"CONFIRM","url":"http://www.oracle.com/technetwork/topics/security/cpuapr2012-366314.html"},{"name":"1026937","refsource":"SECTRACK","url":"http://www.securitytracker.com/id?1026937"},{"name":"MDVSA-2013:150","refsource":"MANDRIVA","url":"http://www.mandriva.com/security/advisories?name=MDVSA-2013:150"}]}}}},"cveMetadata":{"assignerOrgId":"43595867-4340-4103-b7a2-9a5208d29a85","assignerShortName":"oracle","cveId":"CVE-2012-0580","datePublished":"2012-05-03T22:00:00.000Z","dateReserved":"2012-01-11T00:00:00.000Z","dateUpdated":"2024-08-06T18:30:53.377Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2012-05-03 22:55:01","lastModifiedDate":"2026-04-29 01:13:23","problem_types":["NVD-CWE-noinfo","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:N/I:P/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"NONE","integrityImpact":"PARTIAL","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:supply_chain_products_suite:5.2.2:*:*:*:*:*:*:*","matchCriteriaId":"9996DB3E-1D81-4273-AF43-ED728CAADB03"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:supply_chain_products_suite:6.0.0:*:*:*:*:*:*:*","matchCriteriaId":"DB5D276D-4F46-4ABE-822C-1C9A4DA5A58E"},{"vulnerable":true,"criteria":"cpe:2.3:a:oracle:supply_chain_products_suite:6.1.1:*:*:*:*:*:*:*","matchCriteriaId":"DE9E7ED0-D172-4DBA-9A48-7704EDAF5894"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2012","CveId":"580","Ordinal":"1","Title":"CVE-2012-0580","CVE":"CVE-2012-0580","Year":"2012"},"notes":[{"CveYear":"2012","CveId":"580","Ordinal":"1","NoteData":"Unspecified vulnerability in the Oracle Agile PLM for Process component in Oracle Supply Chain Products Suite 5.2.2, 6.0.0, and 6.1.1 allows remote attackers to affect integrity via unknown vectors related to Supplier Portal.","Type":"Description","Title":"CVE-2012-0580"},{"CveYear":"2012","CveId":"580","Ordinal":"2","NoteData":"2012-05-03","Type":"Other","Title":"Published"},{"CveYear":"2012","CveId":"580","Ordinal":"3","NoteData":"2017-12-06","Type":"Other","Title":"Modified"}]}}}