Unauthenticated Access Vulnerability in Oracle iStore Component of Oracle E-Business Suite
CVE-2021-2188
What is CVE-2021-2188?
An unauthenticated access vulnerability exists in the Oracle iStore component of Oracle E-Business Suite, affecting multiple versions. This flaw allows an attacker to exploit the system via HTTP, requiring human interaction from a third party for successful execution. The results can lead to unauthorized access to sensitive data and significant alterations, including unauthorized updates, inserts, or deletions of Oracle iStore accessible data. This vulnerability poses a considerable risk as it can compromise confidentiality and integrity of critical information stored within the platform.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
iStore 12.1.1-12.1.3
iStore 12.2.3-12.2.10
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved