Oracle Suitecommerce Advanced vulnerabilities

2 CVEs affecting Oracle Suitecommerce Advanced, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-14729, published 2020-08-27.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-14728, published 2020-08-27. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. Vulnerability in the SuiteCommerce Advanced (SCA) component of Oracle NetSuite service. Supported versions that are affected are Montblanc, Vinson, Elbrus, Kilimanjaro, Aconcagua, 2018.2, 2019.1,…
• CVE-2020-14729, published 2020-08-27. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. Vulnerability in SuiteCommerce Advanced (SCA) Sites component of Oracle NetSuite service. Supported versions that are affected are prior to 2020.1.4. Difficult to exploit vulnerability allows low…