Vulnerability in Oracle E-Business Suite Shopping Cart Component

CVE-2025-53041

What is CVE-2025-53041?

A vulnerability exists in the Oracle iStore component of Oracle E-Business Suite, which allows an unauthenticated attacker with network access via HTTP to compromise user data. This issue impacts versions 12.2.5 through 12.2.14 of Oracle iStore. Exploiting this vulnerability requires user interaction from a third party, potentially leading to unauthorized updates, inserts, or deletions of accessible data, as well as unauthorized read access to certain datasets within Oracle iStore. Although the vulnerability is confined to Oracle iStore, its exploitation could have broader implications for the entire E-Business Suite ecosystem.

References