CVE-2023-47253

CVE-2023-47253 | Qualitor povoaVoComArray$REQUEST; if inarray$REQUEST'nmalias', array'dtiniciomesatual', 'dtfimmesatual', 'dtiniciomespassado', Proof of Concept POC Just access the URL with your PHP code in "gridValoresPopHidden" parameter. Researches h...

Oracle Business Process Management Suite (12.2.1.4.0 / 14.1.2.0.0) (October 2026 CPU)

The version of Oracle Business Process Management Suite installed on the remote host is affected by multiple vulnerabilities, as referenced in the October 2026 CPU advisory: - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workfl...

EUVD-2026-106612

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Case management Service 11g+. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

EUVD-2026-106498

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

EUVD-2026-106477

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow 11g+. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to...

EUVD-2026-106475

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

EUVD-2026-106468

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: BPM Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-91358

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Case management Service 11g+. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via...

CVE-2026-91243

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Fabric Layer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-91220

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

CVE-2026-91222

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow 11g+. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via SOAP to...

CVE-2026-91213

Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: BPM Composer. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-91358

A vulnerability exists in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (specifically the Case management Service (11g+) component). Affected supported versions include 12.2.1.4.0 and 14.1.2.0.0 . An unauthenticated attacker with network access via HTTP can easi...

CVE-2026-91243

A vulnerability exists in the Fabric Layer component of the Oracle Business Process Management Suite (part of Oracle Fusion Middleware). Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the suit...

CVE-2026-91222

A vulnerability exists in the Oracle Business Process Management Suite product of Oracle Fusion Middleware , specifically within the Human Workflow (11g+) component. Affected versions include 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via SOAP can easily exploit thi...

CVE-2026-91220

The Oracle Business Process Management Suite (Oracle Fusion Middleware) is affected by a vulnerability in the Human Workflow component. Specifically, versions 12.2.1.4.0 and 14.1.2.0.0 are impacted. An unauthenticated attacker with network access via HTTP can easily exploit this vulnerability to ...

CVE-2026-91213

A vulnerability exists in the Oracle Business Process Management Suite product of Oracle Fusion Middleware , specifically within the BPM Composer component. This affects supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can easily exploit this v...

PT-2026-119752

Name of the Vulnerable Software and Affected Versions Oracle Business Process Management Suite versions 12.2.1.4.0 Oracle Business Process Management Suite versions 14.1.2.0.0 Description An issue exists in the Human Workflow component of the Oracle Business Process Management Suite within Oracle...

A Hybrid LLM-Based Framework for Automated Security Annotation Generation in Business Process Models

The modelling and analysis of secure business processes require the incorporation of security annotations into process models. Although BPMN extensions, including SecBPMN2, exist for this purpose, the derivation of accurate and complete security annotations from natural-language specifications...

Oracle Business Process Management Suite (12.2.1.4.0 / 14.1.2.0.0) (July 2026 CPU)

The version of Oracle Business Process Management Suite installed on the remote host is affected by multiple vulnerabilities, as referenced in the July 2026 CPU advisory: - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component: Human Workflow...