Workflow vulnerabilities

10 known vulnerabilities in Workflow from Oracle. 10 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  Workflow: Missing Authentication for Critical Functionality

  CVE-2026-91506Oct 20, 2026Oracle

  Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP

• 7.5 High severity

  Workflow: Improper Access Control

  CVE-2026-91496Oct 20, 2026Oracle

  Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP

• 10.0 Critical severity

  Workflow: Improper Access Control

  CVE-2026-101809Oct 20, 2026Oracle

  Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP t

• 8.1 High severity

  Oracle Workflow: Improper Access Control

  CVE-2026-70931Aug 18, 2026Oracle

  Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via

• 7.5 High severity

  Oracle Workflow: Uncontrolled Resource Consumption

  CVE-2026-70927Aug 18, 2026Oracle

  Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via

• 9.8 Critical severity

  Oracle Workflow: Missing Authentication for Critical Functionality

  CVE-2026-70926Aug 18, 2026Oracle

  Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via

• 8.1 High severity

  Oracle Workflow: Improper Authentication

  CVE-2026-62547Jul 21, 2026Oracle

  Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access v

• 8.1 High severity

  Oracle Workflow: Improper Access Control

  CVE-2026-60780Jul 21, 2026Oracle

  Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP t

• 7.3 High severity

  Oracle Workflow: Improper Access Control

  CVE-2026-60143Jul 21, 2026Oracle

  Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via

• 9.1 Critical severity

  Workflow: Improper Access Control

  CVE-2024-21071Apr 16, 2024Oracle

  Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens and Grants UI). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows high privileged attacker with network access via