User Registration Vulnerability in Oracle E-Business Suite iStore

CVE-2020-14582

Summary

An unauthenticated vulnerability exists in the user registration feature of Oracle iStore within the Oracle E-Business Suite. This flaw allows external attackers with network access to exploit the vulnerability if human interaction is involved. Although primarily affecting Oracle iStore, the potential repercussions extend to other components within the suite. Successful exploitation could lead to unauthorized access to sensitive data and the ability to perform unauthorized actions, including updates, inserts, or deletions of data managed by iStore. Users of affected versions are recommended to apply patches and take mitigation measures to safeguard their data.

References