Oracle vulnerabilities

We track 3,014 vulnerabilities in Oracle products across 60+ products. 3,006 are rated high or critical, and 81 have been exploited in real attacks. The most recent was published on October 24, 2026.

3,014vulnerabilities

715critical

2,291high

81exploited

8.3average CVSS score

Latest Oracle vulnerabilities

7.3 High severity
Helidon: Improper Access Control
CVE-2026-73933Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
8.3 High severity
Helidon: Improper Access Control
CVE-2026-73931Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
9.9 Critical severity
Helidon: Improper Access Control
CVE-2026-73930Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.19 and 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via
8.3 High severity
Helidon: Improper Access Control
CVE-2026-73929Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
7.2 High severity
Helidon: Improper Access Control
CVE-2026-73928Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
7.5 High severity
Helidon: Improper Access Control
CVE-2026-73927Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom
8.2 High severity
Helidon: Improper Access Control
CVE-2026-73925Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom
9.1 Critical severity
Helidon: Improper Access Control
CVE-2026-73924Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom
9.1 Critical severity
Helidon: Improper Access Control
CVE-2026-73922Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom
9.8 Critical severity
Helidon: Improper Access Control
CVE-2026-73921Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.19. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom
9.4 Critical severity
Helidon: Improper Access Control
CVE-2026-73920Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
7.3 High severity
Helidon: Improper Access Control
CVE-2026-73918Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
9.1 Critical severity
Helidon: Improper Access Control
CVE-2026-73917Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
9.1 Critical severity
Helidon: Improper Access Control
CVE-2026-73916Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom
7.5 High severity
Helidon: Improper Access Control
CVE-2026-73915Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
9.8 Critical severity
Helidon: Improper Access Control
CVE-2026-73912Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
7.5 High severity
Helidon: Improper Access Control
CVE-2026-73908Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
7.5 High severity
Helidon: Improper Access Control
CVE-2026-73907Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom
9.8 Critical severity
Helidon: Improper Access Control
CVE-2026-73905Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
7.5 High severity
Helidon: Improper Access Control
CVE-2026-73903Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
7.5 High severity
Helidon: Improper Access Control
CVE-2026-73902Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom
7.3 High severity
Helidon: Improper Access Control
CVE-2026-73894Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
7.3 High severity
Helidon: Improper Access Control
CVE-2026-73891Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
7.5 High severity
Helidon: Improper Access Control
CVE-2026-73890Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compro
7.5 High severity
Helidon: Improper Access Control
CVE-2026-73887Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compro
7.2 High severity
Helidon: Improper Access Control
CVE-2026-73886Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
7.2 High severity
Helidon: Improper Access Control
CVE-2026-73885Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom
7.5 High severity
Helidon: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-73884Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
7.5 High severity
Helidon: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-73883Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom
7.5 High severity
Helidon: Uncontrolled Resource Consumption
CVE-2026-73882Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom
7.5 High severity
Helidon: Improper Access Control
CVE-2026-73879Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
7.5 High severity
Helidon: Exposure of Sensitive Information to an Unauthorized Actor
CVE-2026-73878Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom
7.2 High severity
Helidon: Improper Access Control
CVE-2026-73876Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
7.2 High severity
Helidon: Improper Access Control
CVE-2026-73875Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.18. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom
9.1 Critical severity
Helidon: Improper Access Control
CVE-2026-73866Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
9.1 Critical severity
Helidon: Improper Access Control
CVE-2026-73865Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom
9.4 Critical severity
Helidon: Improper Access Control
CVE-2026-71167Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 4.0.0-4.4.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromi
9.4 Critical severity
Helidon: Improper Access Control
CVE-2026-71166Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom
9.8 Critical severity
Helidon: Improper Access Control
CVE-2026-71164Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 3.0.0-3.2.17. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to comprom
7.5 High severity
Helidon: Improper Access Control
CVE-2026-71160Aug 18, 2026Oracle
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). Supported versions that are affected are 1.0.0-1.4.18 and 3.0.0-3.2.17. Difficult to exploit vulnerability allows low privileged attacker with network access v