Oracle E-Business Suite Workflow Loader Vulnerability Allowing Unauthorized Data Access

Vulnerability

A vulnerability has been identified in the Oracle Workflow component of Oracle E-Business Suite, specifically in versions 12.2.3 through 12.2.15. This easily exploitable vulnerability allows a high-privileged attacker with network access via HTTP to compromise Oracle Workflow. Successful exploitation can lead to unauthorized access to critical data or complete access to all data accessible through Oracle Workflow.

Impact

Exploitation of this vulnerability could result in unauthorized access to sensitive data or complete access to all data within Oracle Workflow that is accessible to the user.

Added: Jan 20, 2026, 10:58 PM
Updated: Jan 20, 2026, 10:58 PM

Vulnerability Rating

Custom Algorithm
spread
2.6
impact
2.5
exploitability
4.4
remediation
0.0
relevance
2.2
threat
0.0
urgency
2.9
incentive
0.0

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.