Oracle Workflow vulnerabilities

6 known vulnerabilities in Oracle Workflow from Oracle. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Oracle Workflow: Improper Access Control

  CVE-2026-70931Aug 18, 2026Oracle

  Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via

• 7.5 High severity

  Oracle Workflow: Uncontrolled Resource Consumption

  CVE-2026-70927Aug 18, 2026Oracle

  Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via

• 9.8 Critical severity

  Oracle Workflow: Missing Authentication for Critical Functionality

  CVE-2026-70926Aug 18, 2026Oracle

  Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via

• 8.1 High severity

  Oracle Workflow: Improper Authentication

  CVE-2026-62547Jul 21, 2026Oracle

  Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access v

• 8.1 High severity

  Oracle Workflow: Improper Access Control

  CVE-2026-60780Jul 21, 2026Oracle

  Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP t

• 7.3 High severity

  Oracle Workflow: Improper Access Control

  CVE-2026-60143Jul 21, 2026Oracle

  Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via