Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

47 records

Vendor: Oracle Component: Istore Clear all filters
TI-2026-57374 CVE-2026-83133 · GHSA-pfw5-4r66-qr6x

Improper access control in Oracle iStore

Priority LOW 39

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00414 Published 2026-09-15 No fix listed CWE-284
TI-2026-43475 CVE-2026-60817 · GHSA-jgp5-vwg4-c6c3

Improper access control in Oracle iStore

Priority LOW 37

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00362 Published 2026-07-21 No fix listed CWE-284
TI-2026-43474 CVE-2026-60816 · GHSA-p475-vcx2-3xjw

Improper access control in Oracle iStore

Priority LOW 24

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).

CVSS 3.1MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00282 Published 2026-07-21 No fix listed CWE-284
TI-2026-43473 CVE-2026-60815 · GHSA-8x79-gv29-9x46

Improper access control in Oracle iStore

Priority LOW 27

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00245 Published 2026-07-21 No fix listed CWE-284
TI-2026-43472 CVE-2026-60813 · GHSA-pv55-6283-9pqh

Improper access control in Oracle iStore

Priority LOW 34

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00486 Published 2026-07-21 No fix listed CWE-284
TI-2025-33040 CVE-2025-53041 · GHSA-xfgq-68j6-xmxv

Improper access control in Oracle iStore

Priority LOW 27

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00233 Published 2025-10-21 No fix listed CWE-284
TI-2025-22017 CVE-2025-30746 · GHSA-27j5-7vqc-pjcg

Cross-site request forgery in Oracle iStore

Priority LOW 27

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00193 Published 2025-07-15 No fix listed CWE-352
TI-2025-21980 CVE-2025-30707 · GHSA-jr74-ph2w-qpmv

Improper access control in Oracle iStore

Priority LOW 34

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Management).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00698 Published 2025-04-15 No fix listed CWE-284
TI-2024-13934 CVE-2024-21143 · GHSA-p66q-q6cx-6j4r

Out-of-bounds read in Oracle iStore

Priority LOW 30

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Management).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00399 Published 2024-07-16 No fix listed CWE-125
TI-2024-13731 CVE-2024-20938 · GHSA-mw5r-4xcp-384g

Improper access control in Oracle iStore

Priority LOW 27

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: ECC).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00309 Published 2024-01-16 No fix listed CWE-284
Load more