Vulnerability in Oracle Workflow of Oracle E-Business Suite

CVE-2025-53052

What is CVE-2025-53052?

A vulnerability exists in the Oracle Workflow component of Oracle E-Business Suite that could be exploited by an unauthenticated attacker with network access over HTTP. Although successful exploitation requires human interaction from someone other than the attacker, it can lead to unauthorized updates, insertions or deletions of Oracle Workflow accessible data, as well as unauthorized read access to some of this data. This vulnerability poses a significant risk as it may affect not only Oracle Workflow but also other products interconnected with it.

References