EUVD-2025-35282

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Workflow Notification Mailer. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow...

PT-2025-42949

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite versions 12.2.3 through 12.2.14 Description An easily exploitable issue exists in the Oracle Workflow product’s Workflow Notification Mailer component of Oracle E-Business Suite. An unauthenticated attacker with network...

CVE-2025-53052: Improper Access Control

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite component: Workflow Notification Mailer. Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Workflow...

Oracle E-Business Suite security vulnerabilities

Oracle E-Business Suite is a set of fully integrated global business management software from Oracle USA. The software provides customer relationship management, service management, financial management and other functions. A security vulnerability exists in Oracle Workflow for Oracle E-Business...

org.apache.syncope.core:syncope-core-persistence-jpa (2.1.8), org.apache.syncope.core:syncope-core-persistence-jpa-json (2.1.8) +12 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.1.8)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.1.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-persistence-jpa 2.1.8 -...

org.apache.syncope.core:syncope-core-logic (2.0.0-m2), org.apache.syncope.core:syncope-core-persistence-jpa (2.0.0-m2) +7 more potentially affected by CVE-2025-57738 via org.apache.syncope.core:syncope-core-spring (2.0.0-m2)

org.apache.syncope.core:syncope-core-spring MAVEN version 2.0.0-m2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.syncope.core:syncope-core-spring and may be impacted: - org.apache.syncope.core:syncope-core-logic 2.0.0-m2 -...

Cross-site Scripting

Liferay Portal is vulnerable to Cross-Site Scripting. The vulnerability is due to improper input validation and output encoding in the My Workflow Tasks page due to user-supplied task/comment fields being stored without sanitization. An attacker can submit crafted content that is saved and later...

VulnCheck KEV: CVE-2024-5276

A SQL Injection vulnerability in Fortra FileCatalyst Workflow allows an attacker to modify application data. Likely impacts include creation of administrative users and deletion or modification of data in the application database. Data exfiltration via SQL injection is not possible using this...

CVE-2025-62157

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Argo Workflows versions prior to 3.6.12 and versions 3.7.0 through 3.7.2 expose artifact repository credentials in plaintext in workflow-controller pod logs. An attacker with permissio...

CVE-2025-55330

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-55682

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-55337

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-55332

Improper enforcement of behavioral workflow in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack...

CVE-2025-55684

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...

CVE-2025-55685

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...

CVE-2025-55686

Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to elevate privileges locally...

PT-2025-42390

Name of the Vulnerable Software and Affected Versions Frigate versions prior to 0.16.2 Description Frigate, a network video recorder with real-time object detection for IP cameras, contains a flaw in its export workflow. Before version 0.16.2, an authenticated user could specify any filesystem...

CVE-2025-62382: External Control of File Name or Path

Frigate is a network video recorder NVR with realtime local object detection for IP cameras. Prior to 0.16.2, Frigate's export workflow allows an authenticated operator to nominate any filesystem location as the thumbnail source for a video export. Because that path is copied verbatim into the...

GHSA-C2HV-4PFJ-MM2R Argo Workflow may expose artifact repository credentials

Summary An attacker who has permissions to read logs from pods in a namespace with Argo Workflow can read workflow-controller logs and get credentials to the artifact repository. Details An attacker, by reading the logs of the workflow controller pod, can access the artifact repository, and steal...

Argo Workflow may expose artifact repository credentials

Summary An attacker who has permissions to read logs from pods in a namespace with Argo Workflow can read workflow-controller logs and get credentials to the artifact repository. Details An attacker, by reading the logs of the workflow controller pod, can access the artifact repository, and steal...