Oracle Workflow vulnerabilities
24 known vulnerabilities affecting oracle/workflow.
Total CVEs
24
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL3HIGH8MEDIUM12LOW1
Vulnerabilities
Page 1 of 2
CVE-2026-70926P2CRITICALCVSS 9.8≥ 12.2.3, ≤ 12.2.152026-08-18
CVE-2026-70926 [CRITICAL] CWE-306 CVE-2026-70926: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result
nvd
CVE-2026-62547P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-62547 [HIGH] CWE-287 CVE-2026-62547: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in
nvd
CVE-2026-60780P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60780 [HIGH] CWE-284 CVE-2026-60780: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Internal Operati
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in takeover
nvd
CVE-2024-21071P3CRITICALCVSS 9.1≥ 12.2.3, ≤ 12.2.132024-04-16
CVE-2024-21071 [CRITICAL] CWE-284 CVE-2024-21071: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens an
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens and Grants UI). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Workflow. While the vulnerability is in Oracle Workflow, attack
nvd
CVE-2026-70931P3HIGHCVSS 8.1≥ 12.2.3, ≤ 12.2.152026-08-18
CVE-2026-70931 [HIGH] CWE-284 CVE-2026-70931: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in un
nvd
CVE-2022-21567P3HIGHCVSS 7.5≥ 12.2.3, ≤ 12.2.112022-07-19
CVE-2022-21567 [HIGH] CVE-2022-21567: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Suppo
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in unauthorized access to critic
nvd
CVE-2026-60143P3HIGHCVSS 7.3≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60143 [HIGH] CWE-284 CVE-2026-60143: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in u
nvd
CVE-2026-70927P3HIGHCVSS 7.5≥ 12.2.3, ≤ 12.2.152026-08-18
CVE-2026-70927 [HIGH] CWE-400 CVE-2026-70927: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in u
nvd
CVE-2021-2015P3HIGHCVSS 8.2≥ 12.2.3, ≤ 12.2.102021-01-20
CVE-2021-2015 [HIGH] CVE-2021-2015: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Suppo
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks require human interaction from a person other than the attacker and
nvd
CVE-2026-60830P3MEDIUMCVSS 6.5≥ 12.2.3, ≤ 12.2.152026-08-18
CVE-2026-60830 [MEDIUM] CWE-284 CVE-2026-60830: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supp
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in unauthorized access t
nvd
CVE-2026-61278P3MEDIUMCVSS 6.3≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-61278 [MEDIUM] CWE-284 CVE-2026-61278: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in
nvd
CVE-2026-60575P3MEDIUMCVSS 6.3≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-60575 [MEDIUM] CWE-284 CVE-2026-60575: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in
nvd
CVE-2006-1884P4CRITICALCVSS 10.0v11.5.1v11.5.9.52006-04-20
CVE-2006-1884 [CRITICAL] CVE-2006-1884: Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business S
Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unknown impact and attack vectors, aka Vuln# OPA01.
nvd
CVE-2025-53052P4MEDIUMCVSS 6.1≥ 12.2.3, ≤ 12.2.142025-10-21
CVE-2025-53052 [MEDIUM] CWE-284 CVE-2025-53052: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks require human interaction from a pe
nvd
CVE-2025-21541P4MEDIUMCVSS 5.4≥ 12.2.3, ≤ 12.2.142025-01-21
CVE-2025-21541 [MEDIUM] CWE-281 CVE-2025-21541: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens an
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens and Grants UI). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in u
nvd
CVE-2020-2753P4MEDIUMCVSS 5.3≥ 12.2.3, ≤ 12.2.9v12.1.32020-04-15
CVE-2020-2753 [MEDIUM] CVE-2020-2753: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in
nvd
CVE-2006-0552P4HIGHCVSS 7.5v11.5.1v11.5.9.52006-02-04
CVE-2006-0552 [HIGH] CVE-2006-0552: Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5,
Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB11.
nvd
CVE-2026-34302P4MEDIUMCVSS 5.5≥ 12.2.3, ≤ 12.2.152026-04-21
CVE-2026-34302 [MEDIUM] CWE-284 CVE-2026-34302: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader)
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Workflow. While the vulnerability is in Oracle Workflow, attacks may signific
nvd
CVE-2026-21959P4MEDIUMCVSS 4.9≥ 12.2.3, ≤ 12.2.152026-01-20
CVE-2026-21959 [MEDIUM] CWE-284 CVE-2026-21959: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader)
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in unauthorized
nvd
CVE-2026-61247P4MEDIUMCVSS 4.8≥ 12.2.3, ≤ 12.2.152026-07-21
CVE-2026-61247 [MEDIUM] CWE-306 CVE-2026-61247: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result
nvd
1 / 2Next →