Description

Oracle E-Business Suite iStore allows registering a new user. Therefore, an attacker may interact with the system as an authenticated user.

Remediation

It's recommended to turn off user registration

References

CVE-2022-21500 and Your Oracle E-Business Suite

Related Vulnerabilities

WordPress Plugin YITH WooCommerce Subscription Security Bypass (1.3.4)

WordPress Plugin WP Activity Log Security Bypass (3.3.1.1)

Java Debug Wire Protocol remote code execution

FrontPage Identified

WordPress Plugin Package Quantity Discount Security Bypass (1.1.2)

Severity

Medium

Classification

CVE-2022-21500 CWE-200 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Configuration Authentication Bypass Information Disclosure