Oracle Workflow vulnerabilities

24 CVEs affecting Oracle Workflow, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-70931, published 2026-08-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2006-0552, published 2006-02-04. High severity, CVSS 7.5. EPSS: 4.8% chance of exploitation in the next 30 days. Unspecified vulnerability in the Net Listener component of Oracle Database server 8.1.7.4, 9.0.1.5, 9.0.1.5 FIPS, and 9.2.0.7 has unspecified impact and attack vectors, as identified by Oracle Vuln#…
CVE-2006-1884, published 2006-04-20. High severity, CVSS 10.0. EPSS: 4.6% chance of exploitation in the next 30 days. Unspecified vulnerability in the Oracle Thesaurus Management System component in Oracle E-Business Suite and OPA 4.5.2 Applications has unknown impact and attack vectors, aka Vuln# OPA01.
CVE-2019-2925, published 2019-10-16. Medium severity, CVSS 4.3. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.8. Easily exploitable vulnerability…
CVE-2021-2015, published 2021-01-20. High severity, CVSS 8.2. EPSS: 1.2% chance of exploitation in the next 30 days. Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.2.3-12.2.10. Easily exploitable vulnerability allows…
CVE-2020-2753, published 2020-04-15. Medium severity, CVSS 5.3. EPSS: 1.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.9. Easily…
CVE-2022-21567, published 2022-07-19. High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.2.3-12.2.11. Easily exploitable vulnerability allows…
CVE-2021-2343, published 2021-07-21. Medium severity, CVSS 4.3. EPSS: 0.9% chance of exploitation in the next 30 days. Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.10. Easily…
CVE-2024-21071, published 2024-04-16. Critical severity, CVSS 9.1. EPSS: 0.7% chance of exploitation in the next 30 days. Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens and Grants UI). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable…
CVE-2026-70926, published 2026-08-18. Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-70927, published 2026-08-18. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…

Latest

CVE-2026-70931, published 2026-08-18. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-60830, published 2026-08-18. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low…
CVE-2026-62547, published 2026-07-21. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit…
CVE-2026-61278, published 2026-07-21. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-61247, published 2026-07-21. Medium severity, CVSS 4.8. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit…
CVE-2026-60780, published 2026-07-21. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Internal Operations). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability…
CVE-2026-60575, published 2026-07-21. Medium severity, CVSS 6.3. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable…
CVE-2026-60149, published 2026-07-21. Medium severity, CVSS 5.2. EPSS: 0.1% chance of exploitation in the next 30 days. Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit…