oracle workflow

Name: oracle workflow
Brand: oracle

productUS

cpe:2.3:a:oracle:workflow:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

public exploit

EPSS ≥ 10%

critical

by severity

0critical2high4medium0low

updated 2026-10-28

vulnerabilities (24)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2006-0552US	high7.5	4.83% (92nd)	—	no fix	2006-02-04	2 versions
CVE-2006-1884US	high10.0	4.60% (92nd)	—	no fix	2006-04-20	2 versions
CVE-2019-2925US	medium4.3	1.22% (68th)	—	no fix	2019-10-16	2 versions
CVE-2021-2015US	medium5.8	1.18% (68th)	—	no fix	2021-01-20	12.2.3 → 12.2.10
CVE-2020-2753US	medium5.3	1.09% (65th)	—	no fix	2020-04-15	2 versions
CVE-2022-21567US	—	0.96% (61st)	—	no fix	2022-07-19	12.2.3 → 12.2.11
CVE-2021-2343US	medium4.0	0.86% (58th)	—	no fix	2021-07-21	2 versions
CVE-2024-21071US	—	0.72% (54th)	—	no fix	2024-04-16	12.2.3 → 12.2.13
CVE-2026-70926US	—OT elevated	0.51% (43rd)	—	no fix	2026-08-18	12.2.3 → 12.2.15
CVE-2026-70927US	—	0.47% (40th)	—	no fix	2026-08-18	12.2.3 → 12.2.15
CVE-2026-62547US	—OT elevated	0.39% (33rd)	—	no fix	2026-07-21	12.2.3 → 12.2.15
CVE-2026-60780US	—	0.39% (33rd)	—	no fix	2026-07-21	12.2.3 → 12.2.15
CVE-2026-70931US	—	0.38% (32nd)	—	no fix	2026-08-18	12.2.3 → 12.2.15
CVE-2026-21959US	—	0.36% (30th)	—	no fix	2026-01-20	12.2.3 → 12.2.15
CVE-2026-60830US	—	0.35% (29th)	—	no fix	2026-08-18	12.2.3 → 12.2.15
CVE-2026-60143US	—	0.31% (23rd)	—	no fix	2026-07-21	12.2.3 → 12.2.15
CVE-2025-21541US	—	0.27% (20th)	—	no fix	2025-01-21	12.2.3 → 12.2.14
CVE-2026-61247US	—OT elevated	0.27% (19th)	—	no fix	2026-07-21	12.2.3 → 12.2.15
CVE-2026-61278US	—	0.26% (18th)	—	no fix	2026-07-21	12.2.3 → 12.2.15
CVE-2026-60575US	—	0.26% (18th)	—	no fix	2026-07-21	12.2.3 → 12.2.15
CVE-2026-34302US	—	0.24% (15th)	—	no fix	2026-04-21	12.2.3 → 12.2.15
CVE-2025-53052US	—	0.23% (14th)	—	no fix	2025-10-21	12.2.3 → 12.2.14
CVE-2026-60149US	—	0.13% (3rd)	—	no fix	2026-07-21	12.2.3 → 12.2.15
CVE-2026-60144US	—	0.11% (1st)	—	no fix	2026-07-21	12.2.3 → 12.2.15

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control14 CVEs
CWE-20Improper Input Validation4 CVEs
CWE-306Missing Authentication for Critical Function3 CVEs
CWE-400Uncontrolled Resource Consumption2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor1 CVEs
CWE-264CWE-2641 CVEs
CWE-281Improper Preservation of Permissions1 CVEs
CWE-287Improper Authentication1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE24 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan