CVE-2017-10186

CVE-2017-10186 affects Oracle E-Business Suite iStore, subcomponent User and Company Profile, with affected versions 12.1.1–12.2.6. The root cause is an access-control weakness that allows an unauthenticated attacker, over HTTP, to read a subset of Oracle iStore data. The CVSSv3 base score is 5.3...