CVE-2020-14728

CVE-2020-14728 affects Oracle NetSuite SuiteCommerce Advanced (SCA). Affected SCA versions include Montblanc, Vinson, Elbrus, Kilimanjaro, Aconcagua, 2018.2, 2019.1, 2019.2. The vulnerability is exposed via HTTP with network access, with low privileges and requires UI interaction. Root cause deta...

CVE-2020-14729

The CVE-2020-14729 issue affects the SuiteCommerce Advanced (SCA) Sites component of Oracle NetSuite . Affected are versions before 2020.1.4. The vulnerability allegedly allows a low-privileged attacker with network access over HTTP to compromise NetSuite SCA, leading to unauthorized creation, de...