Vulnerability in Oracle iStore of Oracle E-Business Suite
CVE-2025-30746
What is CVE-2025-30746?
The Oracle iStore component of Oracle E-Business Suite contains a vulnerability that allows unauthenticated attackers to exploit the shopping cart feature. This vulnerability can be triggered through network access via HTTP and requires interaction from a user other than the attacker. Successful exploitation may lead to unauthorized updates, insertions, deletions, and even reading of sensitive data accessible through Oracle iStore. The scope of the attack may extend beyond the iStore itself, impacting other connected applications and compromising data confidentiality and integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Oracle iStore 12.2.3 <= 12.2.14
References
CVSS V3.1
Timeline
Vulnerability published
Vulnerability Reserved