CVE-2024-21143

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: User Management. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks ...

CVE-2024-21143

...

CVE-2024-21143

CVE-2024-21143 affects Oracle E-Business Suite, Oracle iStore (User Management) versions 12.2.3–12.2.13. An unauthenticated attacker with network access via HTTP can read data from Oracle iStore. The CVE is corroborated across multiple sources (NVD, RH, Nessus plugin), with a MEDIUM severity (CVS...