CVSS: 5.5EPSS: 0%CPEs: 1EXPL: 0CVE-2025-21541
https://notcve.org/view.php?id=CVE-2025-21541
21 Jan 2025 — Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens and Grants UI). Supported versions that are affected are 12.2.3-12.2.14. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Workflow accessible data as well as unauthorized read access to a subset of Oracle Workflow accessi... • https://www.oracle.com/security-alerts/cpujan2025.html • CWE-281: Improper Preservation of Permissions •
CVSS: 9.1EPSS: 0%CPEs: 1EXPL: 0CVE-2024-21071
https://notcve.org/view.php?id=CVE-2024-21071
16 Apr 2024 — Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Admin Screens and Grants UI). Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Workflow. While the vulnerability is in Oracle Workflow, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Workflow. • https://www.oracle.com/security-alerts/cpuapr2024.html • CWE-284: Improper Access Control •