Oracle Business Process Management Suite vulnerabilities

6 known vulnerabilities in Oracle Business Process Management Suite from Oracle. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.2 High severity

  Oracle Business Process Management Suite: Missing Authentication for Critical Functionality

  CVE-2026-91358Oct 20, 2026Oracle

  Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Case management Service (11g+)). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthent

• 9.6 Critical severity

  Oracle Business Process Management Suite: Improper Access Control

  CVE-2026-91243Oct 20, 2026Oracle

  Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Fabric Layer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker wit

• 9.9 Critical severity

  Oracle Business Process Management Suite: Improper Authentication

  CVE-2026-91222Oct 20, 2026Oracle

  Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged att

• 9.8 Critical severity

  Oracle Business Process Management Suite: Improper Authentication

  CVE-2026-91220Oct 20, 2026Oracle

  Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker

• 8.8 High severity

  Oracle Business Process Management Suite: Improper Authentication

  CVE-2026-91213Oct 20, 2026Oracle

  Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: BPM Composer). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker wit

• 9.9 Critical severity

  Oracle Business Process Management Suite: Improper Access Control

  CVE-2026-60542Jul 21, 2026Oracle

  Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker w