CVE-2023-47253

CVE-2023-47253 | Qualitor povoaVoComArray$REQUEST; if inarray$REQUEST'nmalias', array'dtiniciomesatual', 'dtfimmesatual', 'dtiniciomespassado', Proof of Concept POC Just access the URL with your PHP code in "gridValoresPopHidden" parameter. Researches h...

Oracle Business Process Management Suite (12.2.1.4.0 / 14.1.2.0.0) (October 2026 CPU)

The version of Oracle Business Process Management Suite installed on the remote host is affected by multiple vulnerabilities, as referenced in the October 2026 CPU advisory: - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workfl...

EUVD-2026-106612

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Case management Service 11g+. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

EUVD-2026-106498

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

EUVD-2026-106475

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

EUVD-2026-106477

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow 11g+. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to...

EUVD-2026-106468

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: BPM Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-91358

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Case management Service 11g+. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2026-91243

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-91222

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow 11g+. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to...

CVE-2026-91220

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-91213

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: BPM Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-91358

A vulnerability exists in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (specifically the Case management Service (11g+) component). Affected supported versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easi...

CVE-2026-91243

A vulnerability exists in the Fabric Layer component of the Oracle Business Process Management Suite (part of Oracle Fusion Middleware). Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the suit...

CVE-2026-91222

A vulnerability exists in the Oracle Business Process Management Suite product of Oracle Fusion Middleware , specifically within the Human Workflow (11g+) component. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via SOAP can easily exploit thi...

CVE-2026-91220

The Oracle Business Process Management Suite (Oracle Fusion Middleware) is affected by a vulnerability in the Human Workflow component. Specifically, versions 12.2.1.4.0 and 14.1.2.0.0 are impacted. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to ...

CVE-2026-91213

A vulnerability exists in the Oracle Business Process Management Suite product of Oracle Fusion Middleware , specifically within the BPM Composer component. This affects supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this v...

Oracle Business Process Management Suite security vulnerabilities

Oracle Business Process Management Suite versions 12.2.1.4.0 and 14.1.2.0.0.0 contain security vulnerabilities. These vulnerabilities stem from issues with the Human Workflow 11g+ component, which may allow low-privilege attackers to gain control of the Oracle Business Process Management Suite...

PT-2026-119775

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

Oracle Business Process Management Suite security vulnerabilities

Oracle Business Process Management Suite 12.2.1.4.0 and 14.1.2.0.0 versions have security vulnerabilities. These vulnerabilities stem from issues with the BPM Composer component, which may allow attackers with low privileges to gain control of the Oracle Business Process Management Suite through...