Oracle Istore vulnerabilities
46 known vulnerabilities affecting oracle/istore.
Total CVEs
46
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH34MEDIUM12
Vulnerabilities
Page 1 of 3
CVE-2026-60817P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60817 [HIGH] CWE-284 CVE-2026-60817: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). S
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in unauthorized creation,
nvd
CVE-2021-2241P3HIGHCVSS 8.1≥ 12.1.1, ≤ 12.1.32021-04-22
CVE-2021-2241 [HIGH] CVE-2021-2241: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Su
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in unauthorized creation, deletion
nvd
CVE-2025-30707P3HIGHCVSS 7.5≥ 12.2.3, ≤ 12.2.142025-04-15
CVE-2025-30707 [HIGH] CWE-284 CVE-2025-30707: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Management).
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Management). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in unauthorized access
nvd
CVE-2026-60813P3HIGHCVSS 7.2≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60813 [HIGH] CWE-284 CVE-2026-60813: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). S
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in takeover of Oracle iS
nvd
CVE-2018-3188P3HIGHCVSS 8.2v12.1.1v12.1.2+6 more2018-10-17
CVE-2018-3188 [HIGH] CVE-2018-3188: Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Web interface
Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Web interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require hu
nvd
CVE-2018-3018P3HIGHCVSS 8.2v12.1.1v12.1.2+6 more2018-07-18
CVE-2018-3018 [HIGH] CVE-2018-3018: Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Shopping Cart
Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Shopping Cart). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require hu
nvd
CVE-2018-2995P3HIGHCVSS 8.2v12.1.1v12.1.2+6 more2018-07-18
CVE-2018-2995 [HIGH] CVE-2018-2995: Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Shopping Cart
Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Shopping Cart). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require hu
nvd
CVE-2017-3287P3HIGHCVSS 8.2v12.1.1v12.1.2+5 more2017-01-27
CVE-2017-3287 [HIGH] CVE-2017-3287: Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Interfac
Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Interface). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human int
nvd
CVE-2019-2483P3HIGHCVSS 8.2v12.1.1v12.1.2+7 more2024-12-24
CVE-2019-2483 [HIGH] CVE-2019-2483: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). S
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7 and 12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require
nvd
CVE-2017-10409P3HIGHCVSS 8.2v12.1.1v12.1.2+6 more2017-10-19
CVE-2017-10409 [HIGH] CVE-2017-10409: Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Merchant UI).
Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Merchant UI). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require hu
nvd
CVE-2017-10414P3HIGHCVSS 8.2v12.1.1v12.1.2+6 more2017-10-19
CVE-2017-10414 [HIGH] CVE-2017-10414: Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Checkout and
Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Checkout and Order Placement). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6 and 12.2.7. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful at
nvd
CVE-2017-3368P3HIGHCVSS 8.2v12.1.1v12.1.2+5 more2017-01-27
CVE-2017-3368 [HIGH] CVE-2017-3368: Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Address Book)
Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: Address Book). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human inter
nvd
CVE-2016-5489P3HIGHCVSS 8.2v12.1.1v12.1.2+3 more2016-10-25
CVE-2016-5489 [HIGH] CVE-2016-5489: Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.1.1 through 1
Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and integrity via vectors related to Runtime Catalog.
nvd
CVE-2017-10112P3HIGHCVSS 8.2v12.1.1v12.1.2+5 more2017-08-08
CVE-2017-10112 [HIGH] CVE-2017-10112: Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Registra
Vulnerability in the Oracle iStore component of Oracle E-Business Suite (subcomponent: User Registration). Supported versions that are affected are 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require huma
nvd
CVE-2020-14582P3HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.92020-07-15
CVE-2020-14582 [HIGH] CWE-79 CVE-2020-14582: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Registration)
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Registration). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a per
nvd
CVE-2021-2077P3HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102021-01-20
CVE-2021-2077 [HIGH] CVE-2021-2077: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Su
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other th
nvd
CVE-2021-2082P3HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102021-01-20
CVE-2021-2082 [HIGH] CVE-2021-2082: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Su
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other th
nvd
CVE-2021-2089P3HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102021-01-20
CVE-2021-2089 [HIGH] CVE-2021-2089: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Runtime Catalog).
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Runtime Catalog). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other t
nvd
CVE-2021-2096P3HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102021-01-20
CVE-2021-2096 [HIGH] CVE-2021-2096: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Su
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other th
nvd
CVE-2021-2197P3HIGHCVSS 8.2≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102021-04-22
CVE-2021-2197 [HIGH] CVE-2021-2197: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Su
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other th
nvd
1 / 3Next →