Vulnerability in Oracle E-Business Suite's Workflow Loader Component
CVE-2026-34302

5.5MEDIUM

Key Information:

Vendor

Oracle
Status
Oracle Workflow
Vendor
CVE Published:
21 April 2026

What is CVE-2026-34302?

A vulnerability in the Workflow Loader component of Oracle E-Business Suite allows an attacker with high privileges and network access via HTTP to compromise Oracle Workflow. This exploitation can lead to unauthorized updates, inserts, or deletions of Oracle Workflow data. Additionally, attackers may trigger a partial denial of service, potentially affecting the operation of Oracle Workflow. The integrity and availability of the system could be seriously impacted as a result of this vulnerability.

Affected Version(s)

Oracle Workflow 12.2.3 <= 12.2.15

References

https://www.oracle.com/security-alerts/cpuapr2026.html
vendor-advisory

CVSS V3.1

Score:
5.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.