Oracle Helidon vulnerabilities
115 known vulnerabilities affecting oracle/helidon.
Total CVEs
115
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL17HIGH47MEDIUM49LOW2
Vulnerabilities
Page 5 of 6
CVE-2026-73906P4MEDIUMCVSS 5.3v4.5.02026-08-18
CVE-2026-73906 [MEDIUM] CWE-284 CVE-2026-73906: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access
nvd
CVE-2026-73888P4MEDIUMCVSS 5.3v4.5.02026-08-18
CVE-2026-73888 [MEDIUM] CWE-284 CVE-2026-73888: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access
nvd
CVE-2026-73872P4MEDIUMCVSS 5.3v4.5.02026-08-18
CVE-2026-73872 [MEDIUM] CWE-284 CVE-2026-73872: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access
nvd
CVE-2026-73910P4MEDIUMCVSS 5.3v4.5.12026-08-18
CVE-2026-73910 [MEDIUM] CWE-284 CVE-2026-73910: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access
nvd
CVE-2026-73871P4MEDIUMCVSS 5.3v3.2.182026-08-18
CVE-2026-73871 [MEDIUM] CWE-284 CVE-2026-73871: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read acces
nvd
CVE-2026-71157P4MEDIUMCVSS 5.3v4.5.02026-08-18
CVE-2026-71157 [MEDIUM] CWE-284 CVE-2026-71157: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17 and 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unautho
nvd
CVE-2026-73899P4MEDIUMCVSS 5.3v3.2.192026-08-18
CVE-2026-73899 [MEDIUM] CWE-284 CVE-2026-73899: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read acces
nvd
CVE-2026-73877P4MEDIUMCVSS 5.3v3.2.182026-08-18
CVE-2026-73877 [MEDIUM] CWE-284 CVE-2026-73877: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read acces
nvd
CVE-2026-73895P4MEDIUMCVSS 5.3v3.2.182026-08-18
CVE-2026-73895 [MEDIUM] CWE-284 CVE-2026-73895: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read acces
nvd
CVE-2026-70727P4MEDIUMCVSS 5.3v3.2.182026-08-18
CVE-2026-70727 [MEDIUM] CWE-284 CVE-2026-70727: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTPS to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read acce
nvd
CVE-2026-73889P4MEDIUMCVSS 5.3v4.5.02026-08-18
CVE-2026-73889 [MEDIUM] CWE-284 CVE-2026-73889: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access
nvd
CVE-2026-73900P4MEDIUMCVSS 5.3v4.5.12026-08-18
CVE-2026-73900 [MEDIUM] CWE-284 CVE-2026-73900: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access
nvd
CVE-2026-71156P4MEDIUMCVSS 5.3v3.2.192026-08-18
CVE-2026-71156 [MEDIUM] CWE-284 CVE-2026-71156: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, in
nvd
CVE-2026-73898P4MEDIUMCVSS 6.1v4.5.02026-08-18
CVE-2026-73898 [MEDIUM] CWE-284 CVE-2026-73898: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks require human interaction from a person other than the attac
nvd
CVE-2026-73869P4MEDIUMCVSS 6.1v3.2.182026-08-18
CVE-2026-73869 [MEDIUM] CWE-284 CVE-2026-73869: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks require human interaction from a person other than the atta
nvd
CVE-2026-70923P4MEDIUMCVSS 6.1v3.2.192026-08-18
CVE-2026-70923 [MEDIUM] CWE-285 CVE-2026-70923: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks require human interaction from a person other than the atta
nvd
CVE-2026-73870P4MEDIUMCVSS 6.1v4.5.02026-08-18
CVE-2026-73870 [MEDIUM] CWE-284 CVE-2026-73870: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks require human interaction from a person other than the attac
nvd
CVE-2026-71154P4MEDIUMCVSS 6.1v4.5.02026-08-18
CVE-2026-71154 [MEDIUM] CWE-284 CVE-2026-71154: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Helidon executes to compromise Helidon. Successful attacks of this vulnerability can result i
nvd
CVE-2026-83488P4MEDIUMCVSS 5.4≥ 4.0.0, ≤ 4.5.42026-09-15
CVE-2026-83488 [MEDIUM] CWE-284 CVE-2026-83488: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-se
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized upda
nvd
CVE-2026-71165P4MEDIUMCVSS 5.4v3.2.182026-08-18
CVE-2026-71165 [MEDIUM] CWE-284 CVE-2026-71165: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, ins
nvd