CVE-2026-101809

Name of the Vulnerable Software and Affected Versions Oracle E-Business Suite Workflow versions 12.2.3 through 12.2.15

Description An unauthenticated attacker with network access via HTTP can compromise the Workflow Notification Mailer component. This issue allows for full remote code execution (RCE), which is the ability to execute arbitrary commands on a remote machine over a network. Successful exploitation can result in a complete takeover of the Workflow product and may significantly impact other integrated products due to a scope change.

Recommendations Update Oracle E-Business Suite Workflow to a version later than 12.2.15.