CVE-2026-61247

Awaiting Analysis Awaiting Analysis - Queue

Unauthenticated SMTP Access in Oracle Workflow

Publication date: 2026-07-21

Last updated on: 2026-07-28

Assigner: Oracle

Description

Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected are 12.2.3-12.2.15. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SMTP to compromise Oracle Workflow. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Workflow accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Workflow. CVSS 3.1 Base Score 4.8 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:L).

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-07-21

Last Modified

2026-07-28

Generated

2026-08-11

AI Q&A

2026-07-22

EPSS Evaluated

2026-08-09

NVD

CVE-2026-61247

EUVD

EUVD-2026-47437

Affected Vendors & Products

Vendor	Product	Version / Range
oracle	workflow	From 12.2.3 (inc) to 12.2.15 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-400	The product does not properly control the allocation and maintenance of a limited resource.
CWE-306	The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

Attack-Flow Graph

Executive Summary

This is a vulnerability in Oracle Workflow within Oracle E-Business Suite. It allows an unauthenticated attacker with network access via SMTP to potentially modify or delete some data in Oracle Workflow or cause a partial denial of service. The attack requires network access but no user interaction.

Detection Guidance

Detection requires monitoring Oracle Workflow components for unusual SMTP traffic or unauthorized data modifications. Check Oracle Workflow logs for unexpected mail notifications or access patterns. Verify database records for unauthorized inserts, updates, or deletes in Workflow-related tables.

Impact Analysis

If exploited, this vulnerability could allow an attacker to alter or delete data in Oracle Workflow or disrupt its availability. This may lead to data integrity issues or service disruptions for systems relying on Oracle Workflow.

Compliance Impact

This vulnerability could impact compliance by potentially allowing unauthorized data modifications or disruptions, which may violate integrity and availability requirements in standards like GDPR or HIPAA. Affected organizations should assess their exposure.

Mitigation Strategies

Apply the latest Oracle E-Business Suite patches for Workflow Notification Mailer as soon as possible. Monitor Oracle's Critical Patch Updates for Workflow-related fixes. Restrict SMTP access to trusted sources only. Review and update firewall rules to limit exposure to the vulnerable component.

Hi! I’m here to help you understand CVE-2026-61247. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70