Vulnerabilities

TI-2026-49624 CVE-2026-70931 · GHSA-4c73-mhhm-62qp

Improper access control in Oracle Workflow

LOW 35

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.0038 Published 2026-08-18 No fix listed CWE-284

TI-2026-49620 CVE-2026-70927 · GHSA-x8g6-cfrv-28g4

Uncontrolled resource consumption in Oracle Workflow

LOW 39

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0047 Published 2026-08-18 No fix listed CWE-400

TI-2026-49619 CVE-2026-70926 · GHSA-ch9m-g9f4-67x2

Missing authentication in Oracle Workflow

MEDIUM 49

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-306

TI-2026-43486 CVE-2026-60830 · GHSA-q44m-95mh-r2rr

Improper access control in Oracle Workflow

LOW 29

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist).

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00352 Published 2026-08-18 No fix listed CWE-284

TI-2026-44661 CVE-2026-62547 · GHSA-cv5r-v7g9-545m

Improper authentication in Oracle Workflow

LOW 37

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-07-21 No fix listed CWE-287

TI-2026-43922 CVE-2026-61278 · GHSA-g4cq-4v5f-ff52

Improper access control in Oracle Workflow

LOW 28

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00262 Published 2026-07-21 No fix listed CWE-284

TI-2026-43891 CVE-2026-61247 · GHSA-w79v-j6q4-63hq

Missing authentication in Oracle Workflow

LOW 22

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).

CVSS 3.1MEDIUM 4.8 Network No auth No interaction EPSS 0.00271 Published 2026-07-21 No fix listed CWE-306

TI-2026-43440 CVE-2026-60780 · GHSA-v86w-4j7w-gmpx

Improper access control in Oracle Workflow

LOW 37

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Internal Operations).

CVSS 3.1HIGH 8.1 Network No auth No interaction EPSS 0.00392 Published 2026-07-21 No fix listed CWE-284

TI-2026-43240 CVE-2026-60575 · GHSA-4265-4p85-9rph

Improper access control in Oracle Workflow

LOW 28

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00262 Published 2026-07-21 No fix listed CWE-284

TI-2026-42851 CVE-2026-60149 · GHSA-w4cr-3q99-r385

Improper access control in Oracle Workflow

LOW 23

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).

CVSS 3.1MEDIUM 5.2 Local High privileges No interaction EPSS 0.00131 Published 2026-07-21 No fix listed CWE-284

TI-2026-42847 CVE-2026-60144 · GHSA-p3x8-9rc9-vgpr

Improper access control in Oracle Workflow

LOW 16

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).

CVSS 3.1LOW 3.6 Local Low privileges No interaction EPSS 0.00114 Published 2026-07-21 No fix listed CWE-284

TI-2026-42846 CVE-2026-60143 · GHSA-vgxp-xq69-qgm7

Improper access control in Oracle Workflow

LOW 38

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).

CVSS 3.1HIGH 7.3 Network No auth No interaction EPSS 0.00307 Published 2026-07-21 No fix listed CWE-284

TI-2026-26591 CVE-2026-34302 · GHSA-gq3x-4cgf-f2fm

Improper access control in Oracle Workflow

LOW 24

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader).

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00241 Published 2026-04-21 No fix listed CWE-284

TI-2026-17658 CVE-2026-21959 · GHSA-mmgj-xpx2-f5v4

Improper access control in Oracle Workflow

LOW 22

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader).

CVSS 3.1MEDIUM 4.9 Network High privileges No interaction EPSS 0.00365 Published 2026-01-20 No fix listed CWE-284

TI-2025-33051 CVE-2025-53052 · GHSA-4pm2-xpq7-5hv4

Improper access control in Oracle Workflow

LOW 27

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00233 Published 2025-10-21 No fix listed CWE-284

TI-2025-15501 CVE-2025-21541 · GHSA-89gv-ggj8-gg3q

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin…

LOW 24

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens and Grants UI).

CVSS 3.1MEDIUM 5.4 Network Low privileges No interaction EPSS 0.0028 Published 2025-01-21 No fix listed CWE-281

TI-2024-13863 CVE-2024-21071 · GHSA-gvrj-cx9v-hg3m

Improper access control in Oracle Workflow

MEDIUM 42

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens and Grants UI).

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.00723 Published 2024-04-16 No fix listed CWE-284

TI-2022-05947 CVE-2022-21567 · GHSA-69wg-j2xh-f235

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component…

MEDIUM 41

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00956 Published 2022-07-19 No fix listed

TI-2021-02013 CVE-2021-2343 · GHSA-rv64-8m9g-w45v

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component…

LOW 22

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0086 Published 2021-07-20 No fix listed

TI-2021-01701 CVE-2021-2015 · GHSA-8ww5-7wc7-5j2j

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component…

LOW 38

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist).

CVSS 3.1HIGH 8.2 Network No auth User interaction EPSS 0.01184 Published 2021-01-20 No fix listed

TI-2020-02454 CVE-2020-2753 · GHSA-p9xv-p5jw-r5vf

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component…

LOW 32

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01087 Published 2020-04-15 No fix listed

TI-2019-02451 CVE-2019-2925 · GHSA-mxhm-j683-ggpj

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component…

LOW 22

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist).

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.01218 Published 2019-10-16 No fix listed

TI-2006-01829 CVE-2006-1884 · GHSA-383w-9x34-hwrc

Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle…

MEDIUM 50

Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unknown impact and attack vectors, aka Vuln# OPA01.

CVSS 2.0HIGH 10.0 Network No auth Interaction — EPSS 0.04601 Published 2006-04-20 No fix listed

TI-2006-00537 CVE-2006-0552 · GHSA-g6pv-hmfc-v4xj

Unspecified vulnerability in the Net Listener component of Oracle Database server…

MEDIUM 41

Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln# DB11.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04835 Published 2006-02-04 No fix listed

Vulnerabilities

Filters