Vulnerability in Oracle iStore Shopping Cart Component of Oracle E-Business Suite

CVE-2021-2150

Summary

Oracle iStore within the Oracle E-Business Suite is exposed to an unauthenticated access vulnerability that permits attackers with network access via HTTP to exploit weaknesses in the Shopping Cart component. Successful exploitation necessitates human interaction from an individual unrelated to the attacker, leading to potential unauthorized access to sensitive data. This vulnerability can grant attackers the ability to view, update, insert, or delete data accessible through the Oracle iStore, which may extend its impact to other integrated components within the E-Business Suite. The security flaw notably affects supported versions 12.1.1 through 12.1.3 and 12.2.3 through 12.2.10, exposing organizations to substantial risks if unaddressed.

References