CVE-2025-21541

Summary

CVE-2025-21541 is a vulnerability affecting the Oracle Workflow component of Oracle E-Business Suite, versions 12.2.3 to 12.2.14. This issue enables a low-privileged attacker with network access to compromise Oracle Workflow via HTTP. Successful exploitation can result in unauthorized updates, inserts, or deletes to some data, and unauthorized read access to a subset of data. The Base Score, according to the Common Vulnerability Scoring System (CVSS), is 5.4 for Confidentiality and Integrity impacts. The vulnerability can be exploited remotely with low complexity.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.