CVE-2019-2483

The CVE-2019-2483 issue affects Oracle iStore Shopping Cart in Oracle E-Business Suite. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.8. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise iStore, requiring user interaction, and can lead to unauth...

CVE-2021-2199

CVE-2021-2199 affects Oracle iStore (Shopping Cart component) in Oracle E-Business Suite versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability is exploitable by an unauthenticated attacker with network access via HTTP and, per the description, requires human interaction from a user other t...

CVE-2021-2185

CVE-2021-2185 affects Oracle E-Business Suite's Oracle iStore Shopping Cart. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The issue is exploitable by an unauthenticated attacker over HTTP and requires user interaction; successful exploits can grant unauthorized access to Oracle iStore ...

CVE-2022-21354

CVE-2022-21354 affects Oracle E-Business Suite iStore UI (versions 12.2.3–12.2.11). An unauthenticated attacker can access over HTTP and, with user interaction, may update/insert/delete and read Oracle iStore data. The issue is confirmed by multiple sources (NVD, Red Hat, NCSC) and is listed with...

CVE-2021-2188

CVE-2021-2188 affects Oracle E-Business Suite, specifically the Oracle iStore Shopping Cart component. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability allows unauthenticated access over HTTP to compromise Oracle iStore, with user interaction required and potential for un...

CVE-2021-2082

CVE-2021-2082 affects Oracle E-Business Suite iStore (Shopping Cart) in versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability is exploitable remotely via HTTP by an unauthenticated attacker and, per the advisory, requires human interaction; successful attacks can lead to unauthorized acces...

CVE-2021-2186

CVE-2021-2186 affects Oracle E-Business Suite’s Oracle iStore Shopping Cart. Affects 12.1.1–12.1.3 and 12.2.3–12.2.10; vulnerable component is iStore Shopping Cart. The issue allows an unauthenticated attacker with network access over HTTP to compromise iStore; human interaction is required for e...

CVE-2021-2184

CVE-2021-2184 affects Oracle E-Business Suite, specifically the Oracle iStore Shopping Cart component. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability allows an unauthenticated, network-accessing attacker (via HTTP) to compromise Oracle iStore; exploitation requires user...

CVE-2021-2182

CVE-2021-2182 affects Oracle E-Business Suite iStore Shopping Cart. A vulnerability in 12.1.1–12.1.3 and 12.2.3–12.2.10 allows unauthenticated, network-accessible attackers (via HTTP) to access or potentially modify Oracle iStore data; CVSSv3.1 base score 8.2 (C:H, I:L, UI:R) with a network attac...

CVE-2021-2187

CVE-2021-2187 affects Oracle E-Business Suite’s Oracle iStore Shopping Cart component (releases 12.1.1–12.1.3 and 12.2.3–12.2.10). Root cause involves exposed Shopping Cart functionality permitting unauthenticated HTTP access; exploitation in the affected versions can lead to unauthorized access ...

CVE-2021-2197

CVE-2021-2197 affects Oracle E-Business Suite’s Oracle iStore Shopping Cart component. Affects 12.1.1–12.1.3 and 12.2.3–12.2.10. An unauthenticated attacker with HTTP network access can exploit via user interaction to access or modify Oracle iStore data. CVSS v3.1 base score 8.2 (C, I high/low) w...

CVE-2021-2059

Summary of CVE-2021-2059 : A vulnerability in Oracle iStore (Web interface) within Oracle E-Business Suite affects versions 12.1.1–12.1.3 and 12.2.3–12.2.10. It allows an unauthenticated, network-accessible attacker over HTTP to read a subset of Oracle iStore data. CVSS v3.1 base score is 5.3 (Co...

CVE-2021-2089

CVE-2021-2089 affects Oracle E-Business Suite iStore (Runtime Catalog). Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.10. An unauthenticated attacker with network access via HTTP can compromise iStore; attacks require user interaction. Potential impact includes unauthorized access to data and ...

CVE-2021-2183

CVE-2021-2183 affects Oracle E-Business Suite iStore Shopping Cart. Affected versions: 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability allows unauthenticated attackers over HTTP to access or modify Oracle iStore data, with user interaction required and potential impact to other Oracle iStore ...

CVE-2021-2241

CVE-2021-2241 affects Oracle iStore in Oracle E-Business Suite (Shopping Cart component) and is listed for affected versions 12.1.1–12.1.3. The Red Hat, CNVD, CNNVD, NVD, PRION, and other feeds confirm that a low-privilege attacker with network access over HTTP can compromise Oracle iStore, enabl...

CVE-2025-30707

CVE-2025-30707 affects Oracle E-Business Suite, specifically the iStore User Management component. Versions 12.2.3 to 12.2.14 are affected. The vulnerability allows an unauthenticated remote attacker, over HTTP, to access Oracle iStore and potentially exfiltrate data or gain unauthorized access t...

CVE-2021-2150

CVE-2021-2150 affects Oracle iStore (Shopping Cart) in Oracle E-Business Suite, versions 12.1.1–12.1.3 and 12.2.3–12.2.10. The vulnerability permits an unauthenticated, network-accessible attacker via HTTP to compromise iStore, potentially gaining unauthorized access to all iStore data and perfor...

CVE-2017-10414

Technical details about CVE-2017-10414 are not publicly available in the provided Connected documents. Monitor for updates.

CVE-2024-21143

CVE-2024-21143 affects Oracle E-Business Suite, Oracle iStore (User Management) versions 12.2.3–12.2.13. An unauthenticated attacker with network access via HTTP can read data from Oracle iStore. The CVE is corroborated across multiple sources (NVD, RH, Nessus plugin), with a MEDIUM severity (CVS...

CVE-2018-2994

CVE-2018-2994 affects Oracle E-Business Suite’s Oracle iStore Shopping Cart component. Affected versions are 12.1.1–12.2.7. The vulnerability is exploitable over HTTP by an unauthenticated remote attacker, potentially leading to unauthorized read access to a subset of Oracle iStore data. The prov...

CVE-2021-2096

CVE-2021-2096 affects Oracle E-Business Suite iStore (Shopping Cart). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. The issue enables an unauthenticated attacker with network access via HTTP to compromise iStore; exploitation requires user interaction. Impacts include unauthorized acces...

CVE-2021-2077

CVE-2021-2077 affects Oracle E-Business Suite’s Oracle iStore (Shopping Cart). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.10. It is an easily exploitable, unauthenticated remote vulnerability over HTTP that requires user interaction to exploit and can lead to unauthorized access to sensi...

CVE-2020-14582

CVE-2020-14582 affects Oracle E-Business Suite Oracle iStore (User Registration). Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. An unauthenticated attacker with network access via HTTP can compromise iStore; exploitation requires human interaction. Potential impact includes unauthorized ...

CVE-2024-20938

The CVE-2024-20938 flaw affects Oracle E-Business Suite’s Oracle iStore component (ECC) in versions 12.2.3–12.2.13. An unauthenticated attacker with network access over HTTP can compromise iStore, with successful attacks requiring user interaction and potentially impacting related products. The i...

CVE-2020-2582

CVE-2020-2582 affects Oracle E-Business Suite iStore (Shopping Cart) and is confirmed in connected sources as affecting 12.1.1–12.1.3 and 12.2.3–12.2.9. The vulnerability allows unauthenticated network access via HTTPS to Oracle iStore, with user interaction required for exploitation, leading to ...

CVE-2017-10186

CVE-2017-10186 affects Oracle E-Business Suite iStore, subcomponent User and Company Profile, with affected versions 12.1.1–12.2.6. The root cause is an access-control weakness that allows an unauthenticated attacker, over HTTP, to read a subset of Oracle iStore data. The CVSSv3 base score is 5.3...

CVE-2019-2652

CVE-2019-2652 affects Oracle E-Business Suite iStore, Shopping Cart subcomponent. Vulnerable in supported E-Business Suite versions 12.1.1–12.2.8; attack surface is Oracle iStore via HTTP. The vulnerability allows an unauthenticated remote attacker with network access to compromise iStore and may...

CVE-2017-10192

The CVE-2017-10192 issue affects Oracle iStore within Oracle E-Business Suite Shopping Cart for multiple 12.1.x/12.2.x versions. It allows an unauthenticated, network-based attacker over HTTP to read a subset of data due to a disclosed information‑exposure in Shopping Cart handling. Practical imp...

CVE-2018-3018

CVE-2018-3018 affects the Oracle iStore component of Oracle E-Business Suite (Shopping Cart). Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, and 12.2.7. The flaw is exploitable via unauthenticated network access over HTTP; attacks may require user interaction, a...

CVE-2017-10112

CVE-2017-10112 affects Oracle iStore (Oracle E-Business Suite) in the User Registration subcomponent. Affected versions: 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6. The vulnerability is described as easily exploitable: an unauthenticated attacker with network access via HTTP can compr...

CVE-2017-10409

CVE-2017-10409 affects Oracle iStore (Merchant UI) in Oracle E-Business Suite, versions 12.1.1–12.2.7. The vulnerability enables an unauthenticated attacker, with network access over HTTP, to compromise iStore; exploitation requires some user interaction. Impacts include unauthorized access to Or...

CVE-2017-10130

The CVE-2017-10130 issue affects the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Management). Affected versions include 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. It is exploitable by a low-privileged, network attacker with HTTP access, requiring user in...

CVE-2017-3287

CVE-2017-3287 affects Oracle E-Business Suite’s Oracle iStore (User Interface) across versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, and 12.2.6. The vulnerability enables an unauthenticated attacker with network access via HTTP to compromise iStore, with human interaction required. Impa...

CVE-2019-2990

CVE-2019-2990 is an Oracle E-Business Suite iStore vulnerability in the Order Tracker component. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. An unauthenticated attacker with network access over HTTP can compromise iStore, with human interaction required for exploit delivery, potentiall...

CVE-2018-3188

CVE-2018-3188 – Oracle iStore in Oracle E-Business Suite is affected in versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. The vulnerability resides in the Oracle iStore component’s Web interface and is exploitable by an unauthenticated attacker who can access the system ...

CVE-2017-3368

CVE-2017-3368 affects Oracle E-Business Suite’s Oracle iStore (Address Book) across 12.1.1–12.2.6. An unauthenticated attacker with network access via HTTP can compromise iStore; successful exploits require user interaction. The vulnerability grants access to critical Oracle iStore data and may a...

CVE-2020-14596

The CVE-2020-14596 entry concerns Oracle E-Business Suite Oracle iStore (Address Book) with affected versions 12.1.1–12.1.3. The vulnerability allows unauthenticated remote access via HTTP, requires user interaction, and can lead to unauthorized disclosure of data and limited data integrity impac...

CVE-2018-2995

CVE-2018-2995 affects Oracle E-Business Suite iStore (Shopping Cart) in versions 12.1.1–12.2.7. An unauthenticated attacker with network access via HTTP could potentially compromise iStore; attacks may lead to unauthorized data access and unauthorized data modification, with user interaction requ...

CVE-2020-2810

CVE-2020-2810 refers to a vulnerability in Oracle E-Business Suite’s Oracle iStore Shopping Cart. Affected versions are 12.1.1–12.1.3 and 12.2.3–12.2.9. The flaw allows an unauthenticated, network-accessible attacker (via HTTP) to compromise iStore, with user interaction required, potentially ena...

CVE-2016-5489

CVE-2016-5489 is an unspecified vulnerability in the Oracle iStore component of Oracle E-Business Suite (versions 12.1.1–12.1.3, 12.2.3, 12.2.4) affecting the Runtime Catalog subcomponent. The issue allows remote attackers to impact confidentiality and integrity via Runtime Catalog related vector...

CVE-2025-30746

The CVE-2025-30746 entry concerns Oracle E-Business Suite’s Oracle iStore Shopping Cart (versions 12.2.3–12.2.14). The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise iStore, requiring user interaction. Impact includes unauthorized update/insert/delete...

CVE-2025-53041

CVE-2025-53041 concerns the Oracle iStore component (Shopping Cart) of Oracle E-Business Suite. Affected are versions 12.2.5–12.2.14. The vulnerability can be exploited by an unauthenticated attacker over HTTP with network access; exploitation requires user interaction and may impact additional p...