Oracle Istore vulnerabilities
46 known vulnerabilities affecting oracle/istore.
Total CVEs
46
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
HIGH34MEDIUM12
Vulnerabilities
Page 3 of 3
CVE-2025-53041P4MEDIUMCVSS 6.1≥ 12.2.5, ≤ 12.2.142025-10-21
CVE-2025-53041 [MEDIUM] CWE-284 CVE-2025-53041: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). S
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.5-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the
nvd
CVE-2024-20938P4MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.132024-01-16
CVE-2024-20938 [MEDIUM] CWE-284 CVE-2024-20938: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: ECC). Supported v
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: ECC). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attacker a
nvd
CVE-2025-30746P4MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.142025-07-15
CVE-2025-30746 [MEDIUM] CWE-79 CVE-2025-30746: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). S
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the a
nvd
CVE-2021-2059P4MEDIUMCVSS 5.3≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.102021-01-20
CVE-2021-2059 [MEDIUM] CVE-2021-2059: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Web interface). Su
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Web interface). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in unauthoriz
nvd
CVE-2022-21354P4MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.112022-01-19
CVE-2022-21354 [MEDIUM] CVE-2022-21354: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Interface). S
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other than the attack
nvd
CVE-2020-2810P4MEDIUMCVSS 4.7≥ 12.1.1, ≤ 12.1.3≥ 12.2.3, ≤ 12.2.92020-04-15
CVE-2020-2810 [MEDIUM] CVE-2020-2810: Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Su
Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks require human interaction from a person other t
nvd
← Previous3 / 3