Workflow vulnerabilities
CVEs whose affected-version data names the Workflow package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
5 CVEsRSS
CVE-2026-101809Critical· 10.0Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer)
Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with n…
CVE-2026-91496High· 7.5Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer)
Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows low privileged attacker with …
CVE-2026-91506High· 8.1Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer)
Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with…
CVE-2026-60575Medium· 6.3Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer)
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker …
CVE-2025-53052Medium· 6.1Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer)
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows unauthenticated attacker…