Threats tagged 'ghsa-4wvf-7qxr-6vrg'

A vulnerability exists in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart) affecting versions 12.2.3 through 12.2.15. This vulnerability allows a low-privileged attacker with network access via HTTP to potentially compromise Oracle iStore after user interaction. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data within Oracle iStore and may impact additional products. The vulnerability has a CVSS 3.1 base score of 8.7, indicating high severity with significant confidentiality and integrity impacts.