CVE-2021-2089

🗓️ 20 Jan 2021 14:50:09Reported by oracleType

Vulnerability in Oracle iStore product of Oracle E-Business Suite. Allows unauthenticated attacker to compromise Oracle iStore, impacting additional products. Results in unauthorized access to critical data or complete access to all Oracle iStore accessible data, and unauthorized update, insert, or delete access to some data

Reporter	Title	Published	Views	Family All 14
BDU FSTEC	The vulnerability of the Runtime Catalog component of the Oracle iStore system, a system for creating, managing, and personalizing online stores, allows a perpetrator to gain unauthorized access to protected information or to read, add, or delete data.	2 Feb 202100:00	–	bdu_fstec
Circl	CVE-2021-2089	20 Jan 202118:40	–	circl
CNNVD	Oracle E-Business Suite 组件授权问题漏洞	19 Jan 202100:00	–	cnnvd
CNVD	Oracle E-Business Suite Authorization Issues Vulnerability (CNVD-2021-08450)	20 Jan 202100:00	–	cnvd
CVE	CVE-2021-2089	20 Jan 202114:50	–	cve
EUVD	EUVD-2021-16548	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Oracle E-Business Suite	21 Jan 202100:00	–	ncsc
NVD	CVE-2021-2089	20 Jan 202115:15	–	nvd
Oracle	Oracle Critical Patch Update Advisory - January 2021	19 Jan 202100:00	–	oracle
Tenable Nessus	Oracle E-Business Suite Multiple Vulnerabilities (Jan 2021 CPU)	20 Jan 202100:00	–	nessus

[
  {
    "product": "iStore",
    "vendor": "Oracle Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "12.1.1-12.1.3"
      },
      {
        "status": "affected",
        "version": "12.2.3-12.2.10"
      }
    ]
  }
]

Source	Link
oracle	www.oracle.com/security-alerts/cpujan2021.html

20 Jan 2021 14:50Current

8.5High risk

Vulners AI Score8.5

CVSS 3.18.2

EPSS0.01691