Thousands of Oracle NetSuite E-Commerce Sites Expose Sensitive Customer Data

AppOmni discovered a widespread misconfiguration in Oracle NetSuite SuiteCommerce stores that can expose customers' personally identifiable information (addresses, phone numbers) via unauthenticated API/URL access; thousands of sites may be affected, detection is difficult due to limited transactional logs, and the issue highlights broader SaaS security risks and the need for stronger field-level access controls.