CVE-2026-101447

Vulnerability in the Siebel CRM Development product of Oracle Siebel CRM component: Workflow. Supported versions that are affected are 25.12-26.9. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Siebel CRM Development. Successful attack...

CVE-2026-91506

A vulnerability exists in the Workflow product of Oracle E-Business Suite , specifically within the Workflow Notification Mailer component. Affected versions include 12.2.3-12.2.15 . An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to co...

CVE-2026-91496

A vulnerability exists in the Workflow Notification Mailer component of the Oracle E-Business Suite Workflow product (versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise the Workflow system. Successful...

CVE-2026-91222

A vulnerability exists in the Oracle Business Process Management Suite product of Oracle Fusion Middleware , specifically within the Human Workflow (11g+) component. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via SOAP can easily exploit thi...

CVE-2026-91220

The Oracle Business Process Management Suite (Oracle Fusion Middleware) is affected by a vulnerability in the Human Workflow component. Specifically, versions 12.2.1.4.0 and 14.1.2.0.0 are impacted. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to ...

CVE-2026-83367

A vulnerability exists in the Oracle Shipping Execution product of Oracle E-Business Suite , specifically within the Workflow Events component, affecting supported versions 12.2.3-12.2.15 . An unauthenticated attacker with network access via Oracle Net can exploit this high-complexity vulnerabili...

CVE-2026-83366

A vulnerability exists in the Workflow Events component of the Oracle Shipping Execution product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). An unauthenticated attacker with network access via HTTP can exploit this difficult-to-exploit vulnerability to compromise Oracle Shipping Ex...

CVE-2026-101837

A vulnerability exists in the Workflow Events component of the Oracle Shipping Execution product within Oracle E-Business Suite (affected versions 12.2.3-12.2.15 ). A low-privileged attacker with network access via HTTP can exploit this difficult-to-exploit flaw to compromise the product, potenti...

CVE-2026-101835

A vulnerability exists in the Workflow Events component of the Oracle Shipping Execution product within Oracle E-Business Suite (versions 12.2.3-12.2.15 ). An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the product. Successful exploitation may ...

CVE-2026-101834

A vulnerability exists in the Oracle Shipping Execution product of Oracle E-Business Suite within the Workflow Events component. Affected supported versions include 12.2.3-12.2.15 . This difficult to exploit vulnerability allows an unauthenticated attacker with network access via HTTP to compromi...

CVE-2026-101809

The Workflow Notification Mailer component of Oracle E-Business Suite (versions 12.2.3-12.2.15) is vulnerable to a critical flaw. An unauthenticated attacker with network access via HTTP can exploit this vulnerability to compromise and take over Workflow . Due to a scope change , successful explo...

CVE-2026-101447

A vulnerability exists in the Workflow component of Oracle Siebel CRM (Siebel CRM Development product) affecting versions 25.12-26.9 . A low-privileged attacker with network access via HTTP can compromise the system with high complexity and required human interaction. Successful exploitation can ...

aamutils (0.0.11), adversarial-workflow (>=0.4.0, <=0.9.8) +175 more potentially affected by CVE-2026-112397 via pillow (12.1.1)

pillow PYPI version 12.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aamutils 0.0.11 - adversarial-workflow =0.4.0, =1.1.0, =1.3.0, =0.1.0, =0.6.0, =26.3.14, =0.5.2b3, =0.1.3, =0.2.2, =3.1.0, =3.7.4 and more Source...

aamutils (0.0.11), adversarial-workflow (>=0.4.0, <=0.9.8) +175 more potentially affected by CVE-2026-112896 via pillow (12.1.1)

pillow PYPI version 12.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aamutils 0.0.11 - adversarial-workflow =0.4.0, =1.1.0, =1.3.0, =0.1.0, =0.6.0, =26.3.14, =0.5.2b3, =0.1.3, =0.2.2, =3.1.0, =3.7.4 and more Source...

aamutils (0.0.11), adversarial-workflow (>=0.4.0, <=0.9.8) +175 more potentially affected by CVE-2026-112403 via pillow (12.1.1)

pillow PYPI version 12.1.1 is affected by a known vulnerability. The following packages have a transitive dependency on pillow and may be impacted: - aamutils 0.0.11 - adversarial-workflow =0.4.0, =1.1.0, =1.3.0, =0.1.0, =0.6.0, =26.3.14, =0.5.2b3, =0.1.3, =0.2.2, =3.1.0, =3.7.4 and more Source...

CVE-2026-113406

BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents...

CVE-2026-113407

BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents...

CVE-2026-113405

BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents...

EUVD-2026-104826

BA-Workflow developed by YS-infoware has a SQL Injection vulnerability. Authenticated remote attackers can inject arbitrary SQL statements to read, modify, and delete database contents...

CVE-2026-113407

BA-Workflow , developed by YS-infoware , contains a SQL Injection vulnerability (CWE-89). Authenticated remote attackers can exploit this flaw to inject arbitrary SQL statements, potentially allowing them to read, modify, and delete database contents. No specific patch version or remediation step...