CVE-2021-2059

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Web interface. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore...

CVE-2021-2059

Summary of CVE-2021-2059 : A vulnerability in Oracle iStore (Web interface) within Oracle E-Business Suite affects versions 12.1.1–12.1.3 and 12.2.3–12.2.10. It allows an unauthenticated, network-accessible attacker over HTTP to read a subset of Oracle iStore data. CVSS v3.1 base score is 5.3 (Co...

Oracle E-Business Suite Authorization Issues Vulnerability (CNVD-2021-08450)

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iStore is one of the business can effectively build,...

Oracle E-Business Suite Authorization Issues Vulnerability (CNVD-2021-08447)

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iStore is one of the business can effectively build,...

Oracle E-Business Suite Authorization Issues Vulnerability (CNVD-2021-08449)

Oracle E-Business Suite E-Business Suite is a set of fully integrated global business management software from Oracle Oracle. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in the Oracle iStore...

Oracle E-Business Suite 组件安全漏洞

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iStore is one of the business can effectively build,...

Oracle E-Business Suite 安全漏洞

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iStore is one of the business can effectively build,...

Oracle E-Business Suite 授权问题漏洞

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iStore is one of the business can effectively build,...

Oracle E-Business Suite 组件授权问题漏洞

Oracle E-Business Suite E-Business Suite is a fully integrated set of global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. iStore is one of the business can effectively build,...

The vulnerability of the Address Book component of the Oracle iStore system, which is used for creating, managing, and personalizing online stores, allows a malicious individual to gain unauthorized access to protected information or to modify, add, or delete data.

The vulnerability of the Address Book component of the Oracle iStore system, which is used for creating, managing, and personalizing online stores, is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

The vulnerability of the User Registration component of the Oracle iStore system, which is used for creating, managing, and personalizing online stores, allows a hacker to perform a cross-site scripting attack.

The vulnerability of the User Registration component in the Oracle iStore system, which is used for creating, managing, and personalizing online stores, relates to the lack of protective measures for the website structure. Exploiting this vulnerability could allow a malicious actor to perform...

CVE-2020-14596

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Address Book. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks...

CVE-2020-14596

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Address Book. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks...

CVE-2020-14582

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: User Registration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore...

CVE-2020-14582

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: User Registration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore...

Design/Logic Flaw

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: User Registration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore...

Buffer overflow

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Address Book. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks...

CVE-2020-14596

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: Address Book. Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks...

CVE-2020-14596

The CVE-2020-14596 entry concerns Oracle E-Business Suite Oracle iStore (Address Book) with affected versions 12.1.1–12.1.3. The vulnerability allows unauthenticated remote access via HTTP, requires user interaction, and can lead to unauthorized disclosure of data and limited data integrity impac...

CVE-2020-14582

Vulnerability in the Oracle iStore product of Oracle E-Business Suite component: User Registration. Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore...