Oracle Corporation Workflow vulnerabilities

6 known vulnerabilities affecting oracle_corporation/workflow.

Total CVEs

6

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1HIGH2MEDIUM3

Vulnerabilities

Page 1 of 1

CVE-2024-21071CRITICALCVSS 9.1≥ 12.2.3, ≤ 12.2.132024-04-16

CVE-2024-21071 [CRITICAL] CWE-284 CVE-2024-21071: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens an Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens and Grants UI). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Workflow. While the vulnerability is in Oracle Workflow, attack

CVE-2022-21567HIGHCVSS 7.5v12.2.3-12.2.112022-07-19

CVE-2022-21567 [HIGH] CVE-2022-21567: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Suppo Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in unauthorized access to critic

CVE-2021-2343MEDIUMCVSS 4.3v12.1.3v12.2.3-12.2.102021-07-21

CVE-2021-2343 [MEDIUM] CVE-2021-2343: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in

CVE-2021-2015HIGHCVSS 8.2v12.2.3-12.2.102021-01-20

CVE-2021-2015 [HIGH] CVE-2021-2015: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Suppo Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks require human interaction from a person other than the attacker and

CVE-2020-2753MEDIUMCVSS 5.3v12.1.3v12.2.3-12.2.92020-04-15

CVE-2020-2753 [MEDIUM] CVE-2020-2753: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notific Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in

CVE-2019-2925MEDIUMCVSS 4.3v12.1.3v12.2.3-12.2.82019-10-16

CVE-2019-2925 [MEDIUM] CVE-2019-2925: Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Suppo Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks require human interaction from a person other than the