Oracle Corporation iStore

Name: Oracle Corporation iStore
Brand: Oracle Corporation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical13high21medium0low

updated 2026-10-28

vulnerabilities (36)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2018-2994US	medium5.3	2.08% (81st)	—	no fix	2018-07-18	8 versions
CVE-2018-3188US	high8.2	2.02% (81st)	—	no fix	2018-10-17	8 versions
CVE-2018-3018US	high8.2	2.02% (81st)	—	no fix	2018-07-18	8 versions
CVE-2018-2995US	high8.2	2.02% (81st)	—	no fix	2018-07-18	8 versions
CVE-2017-10192US	medium5.3	2.00% (81st)	—	no fix	2017-08-08	7 versions
CVE-2017-10186US	medium5.3	2.00% (81st)	—	no fix	2017-08-08	7 versions
CVE-2017-10414US	high8.2	1.64% (76th)	—	no fix	2017-10-19	8 versions
CVE-2017-10409US	high8.2	1.64% (76th)	—	no fix	2017-10-19	8 versions
CVE-2019-2400US	high8.2	1.53% (75th)	—	no fix	2019-01-16	9 versions
CVE-2017-10112US	high8.2	1.41% (73rd)	—	no fix	2017-08-08	7 versions
CVE-2017-10130US	high7.6	1.39% (72nd)	—	no fix	2017-08-08	7 versions
CVE-2020-2582US	high8.2	1.31% (71st)	—	no fix	2020-01-15	2 versions
CVE-2019-2990US	high8.2	1.29% (70th)	—	no fix	2019-10-16	2 versions
CVE-2019-2652US	high8.2	1.29% (70th)	—	no fix	2019-04-23	9 versions
CVE-2021-2059US	medium5.0	1.24% (69th)	—	no fix	2021-01-20	2 versions
CVE-2020-14596US	high8.2	1.21% (68th)	—	no fix	2020-07-15	≤ 12.1.1-12.1.3
CVE-2020-14582US	high8.2	1.21% (68th)	—	no fix	2020-07-15	2 versions
CVE-2021-2077US	medium5.8	1.19% (68th)	—	no fix	2021-01-20	2 versions
CVE-2021-2096US	medium5.8	1.18% (68th)	—	no fix	2021-01-20	2 versions
CVE-2021-2089US	medium5.8	1.18% (68th)	—	no fix	2021-01-20	2 versions
CVE-2021-2082US	medium5.8	1.18% (68th)	—	no fix	2021-01-20	2 versions
CVE-2021-2197US	medium5.8	1.02% (63rd)	—	no fix	2021-04-22	2 versions
CVE-2020-2810US	medium4.7	1.00% (63rd)	—	no fix	2020-04-15	2 versions
CVE-2021-2241US	medium5.5	0.99% (62nd)	—	no fix	2021-04-22	≤ 12.1.1-12.1.3
CVE-2021-2199US	medium5.8	0.93% (61st)	—	no fix	2021-04-22	2 versions
CVE-2021-2188US	medium5.8	0.93% (61st)	—	no fix	2021-04-22	2 versions
CVE-2021-2187US	medium5.8	0.93% (61st)	—	no fix	2021-04-22	2 versions
CVE-2021-2186US	medium5.8	0.93% (61st)	—	no fix	2021-04-22	2 versions
CVE-2021-2185US	medium5.8	0.93% (61st)	—	no fix	2021-04-22	2 versions
CVE-2021-2184US	medium5.8	0.93% (61st)	—	no fix	2021-04-22	2 versions
CVE-2021-2183US	medium5.8	0.93% (61st)	—	no fix	2021-04-22	2 versions
CVE-2021-2182US	medium5.8	0.93% (61st)	—	no fix	2021-04-22	2 versions
CVE-2021-2150US	medium5.8	0.93% (61st)	—	no fix	2021-04-22	2 versions
CVE-2022-21354US	medium5.8	0.71% (53rd)	—	no fix	2022-01-19	≤ 12.2.3-12.2.11
CVE-2024-21143US	—	0.40% (34th)	—	no fix	2024-07-16	≤ 12.2.3 ≤12.2.13
CVE-2024-20938US	—	0.31% (24th)	—	no fix	2024-01-16	≤ 12.2.3 ≤12.2.13

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-264CWE-26413 CVEs
CWE-284Improper Access Control7 CVEs
CWE-20Improper Input Validation5 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-266Incorrect Privilege Assignment3 CVEs
CWE-287Improper Authentication3 CVEs
CWE-17CWE-172 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')2 CVEs

sources (1)

Which sources assert this record, and when.

EUEU Vulnerability Database (ENISA)36 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan