Oracle Business Process Management Suite (12.2.1.4.0 / 14.1.2.0.0) (October 2026 CPU)

The version of Oracle Business Process Management Suite installed on the remote host is affected by multiple vulnerabilities, as referenced in the October 2026 CPU advisory: - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workfl...

EUVD-2026-106475

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

EUVD-2026-106477

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow 11g+. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to...

CVE-2026-91220

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-91222

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow 11g+. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to...

CVE-2026-91222

A vulnerability exists in the Oracle Business Process Management Suite product of Oracle Fusion Middleware , specifically within the Human Workflow (11g+) component. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via SOAP can easily exploit thi...

CVE-2026-91220

The Oracle Business Process Management Suite (Oracle Fusion Middleware) is affected by a vulnerability in the Human Workflow component. Specifically, versions 12.2.1.4.0 and 14.1.2.0.0 are impacted. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to ...

PT-2026-119752

Name of the Vulnerable Software and Affected Versions Oracle Business Process Management Suite versions 12.2.1.4.0 Oracle Business Process Management Suite versions 14.1.2.0.0 Description An issue exists in the Human Workflow component of the Oracle Business Process Management Suite within Oracle...

EUVD-2026-46904

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to...

CVE-2026-60542

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to...

CVE-2026-60542: Improper Access Control

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to...

PT-2026-62584

Name of the Vulnerable Software and Affected Versions Oracle Business Process Management Suite version 12.2.1.4.0 Oracle Business Process Management Suite version 14.1.2.0.0 Description A flaw in the Human Workflow component of the Oracle Business Process Management Suite allows a low privileged...

Oracle Business Process Management Suite (12.2.1.4.0 / 14.1.2.0.0) (April 2026 CPU)

The version of Oracle Business Process Management Suite installed on the remote host is affected by multiple vulnerabilities, as referenced in the April 2026 CPU advisory: - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Composer Apach...

CVE-2026-34284: Improper Access Control

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human workflow 11g+. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

Oracle Business Process Management Suite security vulnerabilities

Oracle Business Process Management Suite is a business process management platform provided by Oracle, a company in the United States. Versions 12.2.1.4.0 and 14.1.2.0.0.0 of the Oracle Business Process Management Suite contain security vulnerabilities. These vulnerabilities stem from issues with...