CVE-2026-91506

Vulnerability in Oracle Workflow (component: Workflow Notification Mailer) allows an unauthenticated attacker with network access via SMTP to compromise the system. The attack is easily exploitable and requires no user interaction.

Vulnerability in Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Affects versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized access to critical data and cause complete denial of service.

Vulnerability in Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Affects versions 12.2.3-12.2.15. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to cause a hang or frequently repeatable crash (complete DOS) of Oracle Workflow.

Vulnerability in Oracle Workflow (component: Worklist) affects versions 12.2.3-12.2.15. It is easily exploitable by a low-privileged attacker via HTTP, allowing unauthorized access to critical data or full access to data.

Vulnerability in Oracle Workflow (Workflow Notification Mailer) in Oracle E-Business Suite versions 12.2.3-12.2.15. Difficult to exploit, allows unauthenticated attacker via SMTP to take over Oracle Workflow. CVSS 8.1 (high impact on confidentiality, integrity, availability).

Vulnerability in the Workflow Notification Mailer component of Oracle Workflow (Oracle E-Business Suite). An unauthenticated attacker via SMTP can perform unauthorized data modifications and cause partial DoS, but exploitation is difficult.

Vulnerability in Oracle Workflow (component: Internal Operations) versions 12.2.3-12.2.15. Difficult to exploit, allows an unauthenticated attacker with network access via SMTP to take over the system.

Vulnerability in Oracle Workflow (component: Workflow Notification Mailer) versions 12.2.3-12.2.15. A low-privileged attacker with network access via HTTP can gain unauthorized read, write, and delete access to data and cause a partial denial of service.

Vulnerability in Oracle Workflow (Workflow Notification Mailer component) versions 12.2.3-12.2.15. Requires privileged local access and is difficult to exploit. Can lead to complete denial of service (DOS) and unauthorized read, write, and modification of data.

Vulnerability in Oracle Workflow (component: Workflow Notification Mailer) versions 12.2.3-12.2.15. An easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to modify, read, and partially block data.