Vulnerabilities

TI-2026-77897 CVE-2026-101590 · GHSA-wj57-g687-g8r3

Missing authentication in Oracle Helidon lets attackers modify data

MEDIUM 48

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile-security).

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0042 Published 2026-10-20 No fix listed CWE-287

TI-2026-77895 CVE-2026-101588 · GHSA-275f-ffr3-cxw8

Helidon WebSocket flaw exposes sensitive data to unauthenticated attackers

LOW 30

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00316 Published 2026-10-20 No fix listed CWE-200

TI-2026-77894 CVE-2026-101587 · GHSA-rp47-x5rv-33x4

Uncontrolled resource consumption in Oracle Helidon HTTP/1 web client

LOW 30

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http1).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00429 Published 2026-10-20 No fix listed CWE-400

TI-2026-77893 CVE-2026-101586 · GHSA-cqc3-x785-wp5c

Oracle Helidon webclient flaw exposes data to unauthenticated users

LOW 30

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0024 Published 2026-10-20 No fix listed CWE-200

TI-2026-77892 CVE-2026-101585 · GHSA-hcpv-84gr-rr2f

Information exposure in Oracle Helidon CORS component

LOW 37

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors).

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00205 Published 2026-10-20 No fix listed CWE-200

TI-2026-77891 CVE-2026-101584 · GHSA-q4x4-pxgf-vhcv

Uncontrolled resource consumption in Oracle Helidon WebSocket client

LOW 34

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-websocket).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00271 Published 2026-10-20 No fix listed CWE-400

TI-2026-77890 CVE-2026-101583 · GHSA-rwcp-r2qc-9pgh

Uncontrolled resource consumption in Oracle Helidon common mapper

LOW 30

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-mapper).

CVSS 3.1HIGH 7.0 Network No auth No interaction EPSS 0.00227 Published 2026-10-20 No fix listed CWE-400

TI-2026-77889 CVE-2026-101582 · GHSA-9c77-cg3g-rchq

Sensitive information exposure in Oracle Helidon vault integration

LOW 32

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-integrations-vault).

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00316 Published 2026-10-20 No fix listed CWE-200

TI-2026-77888 CVE-2026-101581 · GHSA-52h7-8gh8-jgg4

Improper access control in Oracle Helidon DNS round-robin resolver

LOW 35

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-dns-resolver-round-robin).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00354 Published 2026-10-20 No fix listed CWE-284

TI-2026-77887 CVE-2026-101580 · GHSA-grcq-p2r3-mqff

Information exposure in Oracle Helidon JWT security provider

LOW 32

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-jwt).

CVSS 3.1MEDIUM 5.8 Network No auth No interaction EPSS 0.00316 Published 2026-10-20 No fix listed CWE-200

TI-2026-77886 CVE-2026-101579 · GHSA-9rr9-f5p4-4vvr

Information exposure in Oracle Helidon gRPC server

LOW 37

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-grpc-server).

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00269 Published 2026-10-20 No fix listed CWE-200

TI-2026-77885 CVE-2026-101578 · GHSA-p3pm-mccg-mp4w

Sensitive information exposure in Oracle Helidon Google login provider

LOW 30

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-google-login).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00316 Published 2026-10-20 No fix listed CWE-200

TI-2026-77884 CVE-2026-101577 · GHSA-fqwf-7jx3-88mm

Origin validation error in Oracle Helidon helidon-cors component

LOW 15

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-cors).

CVSS 3.1LOW 3.1 Network No auth User interaction EPSS 0.00217 Published 2026-10-20 No fix listed CWE-346

TI-2026-77883 CVE-2026-101576 · GHSA-f7mj-mc82-px6w

Sensitive information exposure in Oracle Helidon LRA component

LOW 17

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00208 Published 2026-10-20 No fix listed CWE-200

TI-2026-77882 CVE-2026-101575 · GHSA-mgg6-4p85-8324

Uncontrolled resource consumption in Oracle Helidon LRA component

LOW 28

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00194 Published 2026-10-20 No fix listed CWE-400

TI-2026-77881 CVE-2026-101574 · GHSA-52g6-xj2h-vj8f

Helidon OIDC Vulnerability in Oracle Fusion Middleware

LOW 29

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: OIDC).

CVSS 3.1MEDIUM 6.9 Network No auth User interaction EPSS 0.00101 Published 2026-10-20 No fix listed CWE-269

TI-2026-77880 CVE-2026-101573 · GHSA-4gm7-788h-73mq

Improper access control in Oracle Helidon HTTP auth provider

LOW 30

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-http-auth).

CVSS 3.1MEDIUM 6.8 Network No auth No interaction EPSS 0.00257 Published 2026-10-20 No fix listed CWE-284

TI-2026-77879 CVE-2026-101572 · GHSA-jx3w-5j73-gmgr

Uncontrolled resource consumption in Oracle Helidon HTTP/2 client

LOW 39

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2).

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0049 Published 2026-10-20 No fix listed CWE-400

TI-2026-77878 CVE-2026-101571 · GHSA-88fc-9fcr-wr3g

Improper access control in Oracle Helidon IDCS mapper component

LOW 24

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-security-providers-idcs-mapper).

CVSS 3.1MEDIUM 5.6 Local Low privileges No interaction EPSS 0.00108 Published 2026-10-20 No fix listed CWE-284

TI-2026-77877 CVE-2026-101570 · GHSA-c2wh-pwcp-762h

Resource exhaustion in Oracle Helidon HTTP/2 web server

LOW 17

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2).

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00307 Published 2026-10-20 No fix listed CWE-400

TI-2026-77876 CVE-2026-101569 · GHSA-hv68-q6jh-26xg

Improper access control in Oracle Helidon concurrency limits component

LOW 35

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-concurrency-limits).

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.0037 Published 2026-10-20 No fix listed CWE-284

TI-2026-77875 CVE-2026-101568 · GHSA-gfgc-fhv2-q2w3

Information exposure in Oracle Helidon health component

LOW 30

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-health).

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0024 Published 2026-10-20 No fix listed CWE-200

Vulnerabilities

Filters