Oracle Corporation Helidon vulnerabilities
135 known vulnerabilities affecting oracle_corporation/helidon.
Total CVEs
135
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL18HIGH51MEDIUM61LOW5
Vulnerabilities
Page 1 of 7
CVE-2026-73921P2CRITICALCVSS 9.8≥ 1.0.0, ≤ 1.4.192026-08-18
CVE-2026-73921 [CRITICAL] CWE-284 CVE-2026-73921: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in takeover of Helidon.
nvd
CVE-2026-71152P2CRITICALCVSS 9.8≥ 3.0.0, ≤ 3.2.17≥ 4.0.0, ≤ 4.4.12026-08-18
CVE-2026-71152 [CRITICAL] CWE-284 CVE-2026-71152: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17 and 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in takeo
nvd
CVE-2026-73912P2CRITICALCVSS 9.8≥ 4.0.0, ≤ 4.4.12026-08-18
CVE-2026-73912 [CRITICAL] CWE-284 CVE-2026-73912: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in takeover of Helidon. C
nvd
CVE-2026-71164P2CRITICALCVSS 9.8≥ 3.0.0, ≤ 3.2.172026-08-18
CVE-2026-71164 [CRITICAL] CWE-284 CVE-2026-71164: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in takeover of Helidon.
nvd
CVE-2026-71074P2CRITICALCVSS 9.8≥ 1.0.0, ≤ 1.4.19≥ 3.0.0, ≤ 3.2.172026-08-18
CVE-2026-71074 [CRITICAL] CWE-284 CVE-2026-71074: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.19 and 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in take
nvd
CVE-2026-73905P2CRITICALCVSS 9.8≥ 4.0.0, ≤ 4.4.12026-08-18
CVE-2026-73905 [CRITICAL] CWE-284 CVE-2026-73905: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in takeover of Helidon. C
nvd
CVE-2026-73930P2CRITICALCVSS 9.9≥ 3.0.0, ≤ 3.2.19≥ 4.0.0, ≤ 4.5.22026-08-18
CVE-2026-73930 [CRITICAL] CWE-284 CVE-2026-73930: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.19 and 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significa
nvd
CVE-2026-101590P2CRITICALCVSS 9.1≥ 4.0.0, ≤ 4.5.52026-10-20
CVE-2026-101590 [CRITICAL] CWE-287 CVE-2026-101590: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-se
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security). Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized
nvd
CVE-2026-73865P2CRITICALCVSS 9.1≥ 3.0.0, ≤ 3.2.172026-08-18
CVE-2026-73865 [CRITICAL] CWE-284 CVE-2026-73865: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation
nvd
CVE-2026-73917P2CRITICALCVSS 9.1≥ 4.0.0, ≤ 4.4.12026-08-18
CVE-2026-73917 [CRITICAL] CWE-284 CVE-2026-73917: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation,
nvd
CVE-2026-73866P2CRITICALCVSS 9.1≥ 4.0.0, ≤ 4.4.12026-08-18
CVE-2026-73866 [CRITICAL] CWE-284 CVE-2026-73866: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation,
nvd
CVE-2026-73922P2CRITICALCVSS 9.1≥ 1.0.0, ≤ 1.4.182026-08-18
CVE-2026-73922 [CRITICAL] CWE-284 CVE-2026-73922: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation
nvd
CVE-2026-73924P2CRITICALCVSS 9.1≥ 1.0.0, ≤ 1.4.182026-08-18
CVE-2026-73924 [CRITICAL] CWE-284 CVE-2026-73924: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation
nvd
CVE-2026-73916P2CRITICALCVSS 9.1≥ 3.0.0, ≤ 3.2.172026-08-18
CVE-2026-73916 [CRITICAL] CWE-284 CVE-2026-73916: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation
nvd
CVE-2026-71166P2CRITICALCVSS 9.4≥ 3.0.0, ≤ 3.2.172026-08-18
CVE-2026-71166 [CRITICAL] CWE-284 CVE-2026-71166: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation
nvd
CVE-2026-71167P2CRITICALCVSS 9.4≥ 4.0.0, ≤ 4.4.12026-08-18
CVE-2026-71167 [CRITICAL] CWE-284 CVE-2026-71167: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation,
nvd
CVE-2026-73920P2CRITICALCVSS 9.4≥ 4.0.0, ≤ 4.4.12026-08-18
CVE-2026-73920 [CRITICAL] CWE-284 CVE-2026-73920: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized creation,
nvd
CVE-2026-71065P2CRITICALCVSS 9.3≥ 3.0.0, ≤ 3.2.172026-08-18
CVE-2026-71065 [CRITICAL] CWE-284 CVE-2026-71065: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact addi
nvd
CVE-2026-73939P3HIGHCVSS 8.6≥ 3.0.0, ≤ 3.2.192026-08-18
CVE-2026-73939 [HIGH] CWE-284 CVE-2026-73939: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact addition
nvd
CVE-2026-71155P3HIGHCVSS 8.5≥ 3.0.0, ≤ 3.2.172026-08-18
CVE-2026-71155 [HIGH] CWE-284 CVE-2026-71155: Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Helidon. While the vulnerability is in Helidon, attacks may significantly impact additiona
nvd
1 / 7Next →