Security Vulnerability in Oracle iStore Shopping Cart by Oracle

CVE-2021-2185

Summary

A vulnerability exists in the Oracle iStore component of the Oracle E-Business Suite's Shopping Cart functionality. This weakness could allow an unauthenticated attacker with network access to compromise Oracle iStore. The successful exploitation of this vulnerability requires human interaction from a third party, which increases the complexity of an attack. Once exploited, an attacker could gain unauthorized access to sensitive data, with capabilities to read, update, insert, or delete data accessible through Oracle iStore. The implications of this vulnerability extend beyond iStore, potentially affecting other connected systems. Organizations using affected versions are encouraged to implement security measures to mitigate risks.

References