CVE-2019-2483

5 documents4 sources
Severity
8.2HIGH
EPSS
0.2%
top 52.98%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Oracle Corporation Oracle IstoreOracle Istore
Timeline
PublishedDec 24

Description

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in Oracle iStore, attacks may significantly impac…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:NExploitability: 2.8 | Impact: 4.7

Affected Packages2 packages

▶NVDoracle/istore9 versions+8
▶CVEListV5oracle_corporation/oracle_istore9 versions+8

🔴Vulnerability Details

2
GHSA
GHSA-qj5p-g3mq-5m55: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart)↗2024-12-24
▶
CVEList
CVE-2019-2483: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart)↗2024-12-24
▶

💬Community

2
Bugzilla
CVE-2019-10199 keycloak: CSRF check missing in My Resources functionality in the Account Console↗2019-07-11
▶
Bugzilla
CVE-2019-10201 keycloak: SAML broker does not check existence of signature on document allowing any user impersonation↗2019-07-10
▶