Read the docs

Oracle

Records14201All Threatist records
Exploited (KEV)82In CISA KEV
CVSS critical1606CVSS 9.0–10.0
CVSS high4615CVSS 7.0–8.9

Exploited now

Oracle records in CISA KEV
TI-2015-04610 ISC BIND Data Processing Errors Vulnerability Priority CRITICAL 92KEV 2026-10-08TI-2016-02580 Apache Struts Command Injection Vulnerability Priority CRITICAL 94KEV 2026-10-08TI-2015-04443 Red Hat Automatic Bug Reporting Tool Privilege Escalation Vulnerability Priority CRITICAL 93KEV 2026-08-26TI-2026-17661 Oracle HTTP Server and Oracle Weblogic Server Proxy Plug-in Improper Access Control Vulnerability Priority CRITICAL 100KEV 2026-08-24TI-2026-34425 Oracle E-Business Suite Improper Privilege Management Vulnerability Priority CRITICAL 100KEV 2026-07-15TI-2026-27421 Oracle PeopleSoft Enterprise PeopleTools Missing Authentication for Critical Function Vulnerability Priority CRITICAL 100KEV 2026-06-12

Components

Products in the NVD configurations · select one to filter the records
Mysql 1328 records HIGH Jre 817 records CRITICAL Jdk 805 records CRITICAL Solaris 564 records CRITICAL Database Server 531 records HIGH Vm Virtualbox 483 records CRITICAL Peoplesoft Enterprise Peopletools 468 records CRITICAL E-business Suite 462 records CRITICAL

Records

115 records in Helidon · all components

TI-2026-51942 CVE-2026-73930 · GHSA-hx4m-66rg-r7h9

Improper access control in Oracle Helidon

Priority MEDIUM 49

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1CRITICAL 9.9 Network No auth No interaction EPSS 0.00371 Published 2026-08-18 No fix listed CWE-284
TI-2026-51933 CVE-2026-73921 · GHSA-v4pj-495m-jwpw

Improper access control in Oracle Helidon

Priority MEDIUM 49

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-51932 CVE-2026-73920 · GHSA-pr65-82qp-rv35

Improper access control in Oracle Helidon

Priority MEDIUM 49

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00455 Published 2026-08-18 No fix listed CWE-284
TI-2026-51924 CVE-2026-73912 · GHSA-f57v-xr52-p9g9

Improper access control in Oracle Helidon

Priority MEDIUM 49

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-51917 CVE-2026-73905 · GHSA-8gmj-4jc3-jg29

Improper access control in Oracle Helidon

Priority MEDIUM 49

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-49858 CVE-2026-71167 · GHSA-6m35-7pjf-qcm2

Improper access control in Oracle Helidon

Priority MEDIUM 49

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00455 Published 2026-08-18 No fix listed CWE-284
TI-2026-49857 CVE-2026-71166 · GHSA-67hq-wjc8-p8r4

Improper access control in Oracle Helidon

Priority MEDIUM 49

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1CRITICAL 9.4 Network No auth No interaction EPSS 0.00455 Published 2026-08-18 No fix listed CWE-284
TI-2026-49855 CVE-2026-71164 · GHSA-m5vq-hm6p-q5gr

Improper access control in Oracle Helidon

Priority MEDIUM 49

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-49843 CVE-2026-71152 · GHSA-v3hv-vxr8-r858

Improper access control in Oracle Helidon

Priority MEDIUM 49

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-49767 CVE-2026-71074 · GHSA-6w8m-q2rg-2pwq

Improper access control in Oracle Helidon

Priority MEDIUM 49

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00508 Published 2026-08-18 No fix listed CWE-284
TI-2026-51936 CVE-2026-73924 · GHSA-x7r9-f5wv-cmm6

Improper access control in Oracle Helidon

Priority MEDIUM 48

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-08-18 No fix listed CWE-284
TI-2026-51934 CVE-2026-73922 · GHSA-x5mh-jf8q-6w72

Improper access control in Oracle Helidon

Priority MEDIUM 48

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-08-18 No fix listed CWE-284
TI-2026-51929 CVE-2026-73917 · GHSA-pq4w-6f49-j98c

Improper access control in Oracle Helidon

Priority MEDIUM 48

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-08-18 No fix listed CWE-284
TI-2026-51928 CVE-2026-73916 · GHSA-jv5j-g9cf-w4pw

Improper access control in Oracle Helidon

Priority MEDIUM 48

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-08-18 No fix listed CWE-284
TI-2026-51878 CVE-2026-73866 · GHSA-7j4r-xpfh-xcw2

Improper access control in Oracle Helidon

Priority MEDIUM 48

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-08-18 No fix listed CWE-284
TI-2026-51877 CVE-2026-73865 · GHSA-45mf-x7cx-c2v4

Improper access control in Oracle Helidon

Priority MEDIUM 48

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00425 Published 2026-08-18 No fix listed CWE-284
TI-2021-15208 CVE-2021-37136 · GHSA-grg4-wf29-r9vv

Uncontrolled resource consumption in Netty

Priority MEDIUM 48

The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.05908 Published 2021-10-19 Partial fix · 4.1.68Final, 4.1.68.Final CWE-400
TI-2021-10139 CVE-2021-29425 · GHSA-gwrp-pvrq-jmwv

Possible limited path traversal vulnerabily in Apache Commons IO

Priority MEDIUM 48

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.10549 Published 2021-04-13 Partial fix · 2.7 CWE-20
TI-2026-49758 CVE-2026-71065 · GHSA-xmjp-jw52-qx9c

Improper access control in Oracle Helidon

Priority MEDIUM 46

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1CRITICAL 9.3 Network No auth No interaction EPSS 0.00353 Published 2026-08-18 No fix listed CWE-284
TI-2026-51951 CVE-2026-73939 · GHSA-744q-589q-prch

Improper access control in Oracle Helidon

Priority MEDIUM 43

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00354 Published 2026-08-18 No fix listed CWE-284
TI-2026-51949 CVE-2026-73937 · GHSA-8mfj-6rqp-8hrg

Improper access control in Oracle Helidon

Priority MEDIUM 42

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00403 Published 2026-08-18 No fix listed CWE-284
TI-2026-51943 CVE-2026-73931 · GHSA-78hq-qpcq-pwc9

Improper access control in Oracle Helidon

Priority MEDIUM 42

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1HIGH 8.3 Network No auth No interaction EPSS 0.00307 Published 2026-08-18 No fix listed CWE-284
TI-2026-51941 CVE-2026-73929 · GHSA-99ph-frr9-hr7w

Improper access control in Oracle Helidon

Priority MEDIUM 42

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1HIGH 8.3 Network No auth No interaction EPSS 0.00307 Published 2026-08-18 No fix listed CWE-284
TI-2026-51937 CVE-2026-73925 · GHSA-jwqg-99c4-6ggm

Improper access control in Oracle Helidon

Priority MEDIUM 42

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00328 Published 2026-08-18 No fix listed CWE-284
TI-2026-49850 CVE-2026-71159 · GHSA-cm65-c6pf-hg3f

Improper access control in Oracle Helidon

Priority MEDIUM 42

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server).

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00353 Published 2026-08-18 No fix listed CWE-284
Load more
Open these records in search →