CVE-2022-21567

CVE-2022-21567 affects Oracle E-Business Suite, Worklist component (Oracle Workflow). Affected versions: 12.2.3–12.2.11. Description: unauthenticated attacker over HTTP can access Oracle Workflow data, with potential data exposure or broader access. CVSS v3.1 base score 7.5 (High). Mitigation: pa...

CVE-2024-21071

CVE-2024-21071 affects Oracle E-Business Suite’s Oracle Workflow (Admin Screens and Grants UI) with affected versions 12.2.3–12.2.13. The vulnerability allows a high-privilege attacker with network access via HTTP to take over Oracle Workflow; the CVSS v3.1 base score is 9.1 (CRITICAL). Oracle’s ...

CVE-2006-1884

Technical details for CVE-2006-1884 are not publicly available in the provided documents. No affected product/version, impact, or remediation is described here. Monitor for updates from official advisories and vulnerability databases.

CVE-2006-0552

Technical details about CVE-2006-0552 (affected Oracle Net Listener, impact, exploitability, and fix) are not publicly provided in the supplied documents; monitor for official advisories for concrete information.

CVE-2021-2343

CVE-2021-2343 affects Oracle E-Business Suite, specifically the Workflow product’s Workflow Notification Mailer. Affected versions are 12.1.3 and 12.2.3–12.2.10. The vulnerability allows a low-privilege attacker with network access via HTTP to read a subset of Oracle Workflow data. The CVSS v3.1 ...

CVE-2021-2015

CVE-2021-2015 affects Oracle E-Business Suite, specifically the Oracle Workflow component (Worklist). Affected versions are 12.2.3–12.2.10. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Workflow, with exploitation requiring user interaction...

CVE-2019-2925

CVE-2019-2925 affects Oracle E-Business Suite, Oracle Workflow, Worklist component. Affected versions: 12.1.3 and 12.2.3–12.2.8. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Workflow, with exploitation requiring human interaction. Conseque...

CVE-2025-21541

CVE-2025-21541 affects Oracle E-Business Suite Workflow, component Admin Screens and Grants UI, with exposed vulnerability in versions 12.2.3–12.2.14. The issue allows a low-privilege, network-authenticated attacker (HTTP) to perform unauthorized updates, inserts, or deletes and to read a subset ...

CVE-2020-2753

Technical details about CVE-2020-2753 are not publicly available in the provided connected documents; monitor for updates.

CVE-2026-62547

CVE-2026-62547 is a vulnerability in Oracle E-Business Suite’s Oracle Workflow product, specifically the Workflow Notification Mailer. Affected versions are 12.2.3–12.2.15. The issue is exploitable by an unauthenticated attacker with network access via SMTP and can lead to takeover of Oracle Work...

CVE-2025-53052

CVE-2025-53052 affects Oracle Workflow in Oracle E-Business Suite (versions 12.2.3–12.2.14). Affected component: Workflow Notification Mailer. An unauthenticated attacker with network access via HTTP can compromise Oracle Workflow; attacks require human interaction and may affect other products (...

CVE-2026-21959

CVE-2026-21959 concerns Oracle E-Business Suite — Oracle Workflow (Workflow Loader) vulnerability affecting 12.2.3–12.2.15. The public description states a high-privilege attacker with network access over HTTP can compromise Oracle Workflow, potentially gaining unauthorized access to or full acce...

CVE-2026-60780

CVE-2026-60780 affects Oracle Workflow in Oracle E-Business Suite (Internal Operations). Affected: 12.2.3–12.2.15. The vulnerability can be exploited by an unauthenticated attacker with network access via SMTP to compromise Oracle Workflow, potentially taking over the workflow. CVSS 3.1 base scor...

CVE-2026-34302

CVE-2026-34302 affects Oracle E-Business Suite Oracle Workflow, specifically the Workflow Loader component, with affected versions 12.2.3–12.2.15. The vulnerability allows a high-privileged attacker who can reach the system over HTTP to compromise Oracle Workflow, enabling unauthorized update/ins...

CVE-2026-60144

CVE-2026-60144 affects Oracle E-Business Suite, Oracle Workflow (Workflow Notification Mailer) for versions 12.2.3–12.2.15. The issue allows a low-privilege attacker with logon to the infrastructure where Oracle Workflow runs to perform unauthorized updates/inserts/deletes on Oracle Workflow data...

CVE-2026-60149

CVE-2026-60149 affects Oracle E-Business Suite Oracle Workflow, specifically the Workflow Notification Mailer, with affected versions 12.2.3–12.2.15. The vulnerability is described as allowing a high-privilege user who can log into the infrastructure running Oracle Workflow to cause a hang or rep...

CVE-2026-60575

The CVE concerns Oracle E-Business Suite’s Workflow component, specifically the Workflow Notification Mailer. Affected versions are 12.2.3–12.2.15. The issue allows a low-privilege attacker with HTTP network access to perform unauthorized updates/inserts/deletes and reads in Oracle Workflow data,...

CVE-2026-60143

The CVE-2026-60143 entry concerns Oracle E-Business Suite Oracle Workflow’s Workflow Notification Mailer. Affected are E-Business Suite versions 12.2.3 through 12.2.15. The vulnerability allows an unauthenticated, network-accessible attacker over HTTP to compromise Oracle Workflow, enabling unaut...

CVE-2026-61278

CVE-2026-61278 affects Oracle E-Business Suite Oracle Workflow, specifically the Workflow Notification Mailer component, with affected versions 12.2.3–12.2.15. The vulnerability is exploitable over HTTP by a low-privileged user with network access, enabling unauthorized read/update/insert/delete ...

CVE-2026-61247

CVE-2026-61247 affects Oracle E-Business Suite Oracle Workflow, specifically the Workflow Notification Mailer. Affected versions are 12.2.3 through 12.2.15. The vulnerability can be triggered by an unauthenticated attacker who can access via SMTP over the network, enabling unauthorized update/ins...