Helidon vulnerabilities

68 known vulnerabilities in Helidon from Oracle. 68 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.3 High severity

  Helidon: Improper Access Control

  CVE-2026-73891Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 7.5 High severity

  Helidon: Improper Access Control

  CVE-2026-73890Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compro

• 7.5 High severity

  Helidon: Improper Access Control

  CVE-2026-73887Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compro

• 7.2 High severity

  Helidon: Improper Access Control

  CVE-2026-73886Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 7.2 High severity

  Helidon: Improper Access Control

  CVE-2026-73885Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 7.5 High severity

  Helidon: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-73884Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 7.5 High severity

  Helidon: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-73883Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 7.5 High severity

  Helidon: Uncontrolled Resource Consumption

  CVE-2026-73882Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 7.5 High severity

  Helidon: Improper Access Control

  CVE-2026-73879Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 7.5 High severity

  Helidon: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-73878Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 7.2 High severity

  Helidon: Improper Access Control

  CVE-2026-73876Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 7.2 High severity

  Helidon: Improper Access Control

  CVE-2026-73875Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 9.1 Critical severity

  Helidon: Improper Access Control

  CVE-2026-73866Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 9.1 Critical severity

  Helidon: Improper Access Control

  CVE-2026-73865Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 9.4 Critical severity

  Helidon: Improper Access Control

  CVE-2026-71167Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi

• 9.4 Critical severity

  Helidon: Improper Access Control

  CVE-2026-71166Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 9.8 Critical severity

  Helidon: Improper Access Control

  CVE-2026-71164Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 7.5 High severity

  Helidon: Improper Access Control

  CVE-2026-71160Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18 and 3.0.0-3.2.17. Difficult to exploit vulnerability allows low privileged attacker with network access v

• 8.2 High severity

  Helidon: Improper Access Control

  CVE-2026-71159Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 7.5 High severity

  Helidon: Improper Access Control

  CVE-2026-71158Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 8.5 High severity

  Helidon: Improper Access Control

  CVE-2026-71155Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromi

• 7.5 High severity

  Helidon: Improper Access Control

  CVE-2026-71153Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 9.8 Critical severity

  Helidon: Improper Access Control

  CVE-2026-71152Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17 and 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via

• 8.1 High severity

  Helidon: Improper Privilege Management

  CVE-2026-71110Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18, 3.0.0-3.2.17 and 4.0.0-4.4.1. Easily exploitable vulnerability allows low privileged attacker with netwo

• 9.8 Critical severity

  Helidon: Improper Access Control

  CVE-2026-71074Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.19 and 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.3 Critical severity

  Helidon: Improper Access Control

  CVE-2026-71065Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 7.5 High severity

  Helidon: Uncontrolled Resource Consumption

  CVE-2026-70908Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom

• 7.4 High severity

  Helidon: Improper Access Control

  CVE-2026-60915Aug 18, 2026Oracle

  Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17 and 4.0.0-4.4.1. Difficult to exploit vulnerability allows unauthenticated attacker with network access v