Oracle Helidon vulnerabilities
115 known vulnerabilities affecting oracle/helidon.
Total CVEs
115
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL17HIGH47MEDIUM49LOW2
Vulnerabilities
Page 6 of 6
CVE-2026-73911P4MEDIUMCVSS 5.4v4.5.02026-08-18
CVE-2026-73911 [MEDIUM] CWE-284 CVE-2026-73911: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, inse
nvd
CVE-2026-73881P4MEDIUMCVSS 5.4v4.5.02026-08-18
CVE-2026-73881 [MEDIUM] CWE-284 CVE-2026-73881: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, inse
nvd
CVE-2026-73874P4MEDIUMCVSS 5.4v4.5.02026-08-18
CVE-2026-73874 [MEDIUM] CWE-284 CVE-2026-73874: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, inse
nvd
CVE-2026-73913P4MEDIUMCVSS 5.4v4.5.02026-08-18
CVE-2026-73913 [MEDIUM] CWE-284 CVE-2026-73913: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, inse
nvd
CVE-2026-73919P4MEDIUMCVSS 5.4v3.2.182026-08-18
CVE-2026-73919 [MEDIUM] CWE-284 CVE-2026-73919: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, ins
nvd
CVE-2026-83480P4MEDIUMCVSS 5.3≥ 4.0.0, ≤ 4.5.42026-09-15
CVE-2026-83480 [MEDIUM] CWE-400 CVE-2026-83480: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a partia
nvd
CVE-2026-83459P4MEDIUMCVSS 5.3≥ 3.0.0, < 3.2.202026-09-15
CVE-2026-83459 [MEDIUM] CWE-400 CVE-2026-83459: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-media-multipart
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-media-multipart). Supported versions that are affected are 3.0.0-3.2.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability
nvd
CVE-2026-83458P4MEDIUMCVSS 5.3≥ 4.0.0, ≤ 4.5.42026-09-15
CVE-2026-83458 [MEDIUM] CWE-400 CVE-2026-83458: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: JSON). Supported versi
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: JSON). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial de
nvd
CVE-2026-71161P4MEDIUMCVSS 5.3v3.2.182026-08-18
CVE-2026-71161 [MEDIUM] CWE-284 CVE-2026-71161: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to
nvd
CVE-2026-73932P4MEDIUMCVSS 5.3v4.5.32026-08-18
CVE-2026-73932 [MEDIUM] CWE-284 CVE-2026-73932: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to
nvd
CVE-2026-73901P4MEDIUMCVSS 4.8v4.5.12026-08-18
CVE-2026-73901 [MEDIUM] CWE-284 CVE-2026-73901: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, i
nvd
CVE-2026-73873P4MEDIUMCVSS 4.2v3.2.182026-08-18
CVE-2026-73873 [MEDIUM] CWE-284 CVE-2026-73873: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Difficult to exploit vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, i
nvd
CVE-2026-73880P4MEDIUMCVSS 4.4v4.5.12026-08-18
CVE-2026-73880 [MEDIUM] CWE-284 CVE-2026-73880: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Helidon executes to compromise Helidon. Successful attacks of this vulnerability can result
nvd
CVE-2026-60853P4LOWCVSS 3.7v3.2.202026-08-18
CVE-2026-60853 [LOW] CWE-200 CVE-2026-60853: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access
nvd
CVE-2026-73923P4LOWCVSS 3.7v1.4.202026-08-18
CVE-2026-73923 [LOW] CWE-284 CVE-2026-73923: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.19. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, ins
nvd
← Previous6 / 6