Istore

Vendor:

First CVE: Oct 25, 2016 · Active for 9 years

42

Total CVEs

More Total CVEs than 97% of tracked products

4.7

Avg CVEs / Year

Higher CVE frequency than 87% of tracked products

7.5

Avg CVSS

Higher Avg CVSS than 59% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Istore over time

Volume of CVEsAvg CVSS Base Score

First CVE

Oct 25, 2016

9 years ago

Most Recent CVE

Oct 21, 2025

276 days ago

CVE Severity & Scoring

Istore42 CVEs

24%

76%

All CVEs352,294 CVEs

45%

40%

11%

MediumHigh

Attack Vector

Local0 (0.0%)

Network42 (100.0%)

Unknown0 (0.0%)

Physical0 (0.0%)

Adjacent Network0 (0.0%)

Attack Complexity

Low42 (100.0%)

High0 (0.0%)

Unknown0 (0.0%)

User Interaction

None7 (16.7%)

Unknown0 (0.0%)

Required35 (83.3%)

Privileges Required

Low2 (4.8%)

High0 (0.0%)

None40 (95.2%)

Unknown0 (0.0%)

Top CVEs

Signals from CVEs in this product scope (42 CVEs).

42 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2021-2199HIGH Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily	Apr 22, 2021	8.2	26	NO	NO
CVE-2021-2186HIGH Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily	Apr 22, 2021	8.2	26	NO	NO
CVE-2021-2150HIGH Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily	Apr 22, 2021	8.2	26	NO	NO
CVE-2020-14596HIGH Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Address Book). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnerab	Jul 15, 2020	8.2	26	NO	NO
CVE-2016-5489HIGH Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 12.1.1 through 12.1.3, 12.2.3, and 12.2.4 allows remote attackers to affect confidentiality and	Oct 25, 2016	8.2	26	NO	NO
CVE-2021-2241HIGH Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3. Easily exploitable vulnera	Apr 22, 2021	8.1	25	NO	NO
CVE-2021-2187HIGH Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily	Apr 22, 2021	8.2	25	NO	NO
CVE-2021-2185HIGH Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily	Apr 22, 2021	8.2	25	NO	NO
CVE-2021-2183HIGH Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily	Apr 22, 2021	8.2	25	NO	NO
CVE-2021-2096HIGH Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Shopping Cart). Supported versions that are affected are 12.1.1-12.1.3 and 12.2.3-12.2.10. Easily	Jan 20, 2021	8.2	25	NO	NO

View all 42 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (42 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

0 CVEs

0.0% of CVEs· Bottom 1%

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

0 CVEs

0.0% of CVEs· Bottom 1%

Social Chatter

Signals from CVEs in this product scope (42 CVEs).

Media Mentions

Signals from CVEs in this product scope (42 CVEs).

Top CNAs Publishing CVEs For Istore

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS
12.2.8	2	8.2	0.9%
12.2.7	8	7.8	1.6%
12.2.6	14	7.5	1.7%
12.2.5	14	7.5	1.7%
12.2.4	15	7.6	1.7%
12.2.3	15	7.6	1.7%
12.1.3	15	7.6	1.7%
12.1.2	15	7.6	1.7%
12.1.1	15	7.6	1.7%