Oracle Workflow exposes a flaw in the Workflow Loader component that allows an attacker who has already acquired high privileges and can reach the system via HTTP to bypass authorization controls. The vulnerability enables unauthorized insert, update, or delete operations on Workflow data and can also trigger a partial denial of service. The impact is on data integrity and limited service availability.

Oracle Corporation's Oracle Workflow product, part of Oracle E‑Business Suite, is affected in the versions spanning 12.2.3 through 12.2.15. The flaw exists in the Workflow Loader component of these releases. Systems running any of these versions should be verified for the presence of the loader module.

The CVSS 3.1 base score of 5.5 indicates moderate severity with low to moderate impact on integrity and availability. The attack requires network connectivity to the affected HTTP interface and that the attacker already holds high privileges in the system, thereby limiting the likelihood but still offering significant risk. No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog. Attackers can exploit the flaw by sending crafted HTTP requests to the Workflow Loader endpoint, achieving unauthorized data manipulation and a partial denial of service.