workflow vulnerabilities and fixes

Recent CVEs affecting workflow, with upgrade or downgrade steps. 8 tracked.

workflow has 8 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 8. Most recent: 2026-08-18. Highest priority: CVE-2026-70926 (score 53/100).

• CVE-2026-60780 HIGH 8.1 UPGRADE Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Internal Operations)
• CVE-2026-60575 MEDIUM 6.3 UPGRADE Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mail
• CVE-2026-62547 HIGH 8.1 UPGRADE Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mail
• CVE-2026-61278 MEDIUM 6.3 UPGRADE Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mail
• CVE-2026-61247 MEDIUM 4.8 UPGRADE Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mail
• CVE-2026-60830 MEDIUM 6.5 UPGRADE Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist)
• CVE-2026-70926 CRITICAL 9.8 UPGRADE Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mail
• CVE-2026-70927 HIGH 7.5 UPGRADE Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mail

FAQ

How do I fix workflow vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is workflow being exploited right now?

None of the tracked workflow CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which workflow CVE should I patch first?

CVE-2026-70926 currently ranks highest (53/100): Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mail.

← Back to latest CVEs