Oracle iStore vulnerabilities

7 known vulnerabilities in Oracle iStore from Oracle. 7 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  Oracle iStore: Improper Access Control

  CVE-2026-83135Sep 15, 2026Oracle

  Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis

• 7.7 High severity

  Oracle iStore: Improper Access Control

  CVE-2026-83134Sep 15, 2026Oracle

  Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis

• 7.5 High severity

  Oracle iStore: Improper Access Control

  CVE-2026-83133Sep 15, 2026Oracle

  Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 8.1 High severity

  Oracle iStore: Improper Access Control

  CVE-2026-83132Sep 15, 2026Oracle

  Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis

• 8.1 High severity

  Oracle iStore: Improper Access Control

  CVE-2026-60817Jul 21, 2026Oracle

  Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromis

• 7.2 High severity

  Oracle iStore: Improper Access Control

  CVE-2026-60813Jul 21, 2026Oracle

  Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromi

• 7.5 High severity

  Oracle iStore: Improper Access Control

  CVE-2025-30707Apr 15, 2025Oracle

  Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: User Management). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compro