CVE-2026-34302: Medium severity Oracle Oracle Workflow (Oracle E-Business Suite) vulnerability
Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Loader). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Workflow. While the vulnerability is in Oracle Workflow, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Workflow accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Workflow. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:L).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-34302?
CVE-2026-34302 has been classified as easily exploitable and poses a high risk to Oracle Workflow users.
How do I fix CVE-2026-34302?
To fix CVE-2026-34302, you should apply the latest security patches provided by Oracle for Oracle Workflow.
Which versions are affected by CVE-2026-34302?
CVE-2026-34302 affects Oracle Workflow in versions 12.2.3 through 12.2.15 of Oracle E-Business Suite.
Who can exploit CVE-2026-34302?
CVE-2026-34302 can be exploited by high privileged attackers with network access via HTTP.
What component is involved in CVE-2026-34302?
The vulnerability CVE-2026-34302 is specifically related to the Workflow Loader component of the Oracle Workflow product.