CVE-2021-2059 in iStoreinformación

Resumen

por MITRE • 2021-01-20

Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Web interface). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle iStore. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle iStore accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsable

Oracle

Reservar

2020-12-09

Divulgación

2021-01-20

Moderación

aceptado

Artículo

VDB-168213

CPE

listo

EPSS

0.01200

KEV

no

Actividades

muy bajo

Fuentes

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!