Security weakness in Oracle iStore Shopping Cart by Oracle

CVE-2021-2184

Summary

A vulnerability exists in Oracle iStore that can be exploited by an unauthenticated attacker with network access via HTTP. The flaw is in the Shopping Cart component, affecting several versions of Oracle iStore. Successful exploitation could grant the attacker unauthorized access to critical data stored in Oracle iStore. This includes the ability to update, insert, or delete data, posing significant risks to businesses relying on this application. Human interaction is required for successful attacks, further complicating threat mitigation.

References