CVE-2026-83480

CVE-2026-83480 affects the WebSocket component of Oracle Helidon (part of Oracle Fusion Middleware), versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via HTTP can trigger a partial denial of service against the affected instance. The CVSS 3.1 base score is 5.3 (MEDIU...

EUVD-2026-79757

Vulnerability in the Helidon product of Oracle Fusion Middleware component: JSON. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can...

CVE-2026-83458

Oracle Helidon (part of Oracle Fusion Middleware), specifically the JSON component , is affected in supported versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via HTTP can exploit this with low complexity to cause a partial denial of service (partial DOS) of Helidon....

EUVD-2026-79758

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-media-multipart. Supported versions that are affected are 3.0.0-3.2.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of th...

EUVD-2026-79737

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-security-providers-idcs-mapper. Supported versions that are affected are 3.0.0-3.2.20 and 4.0.0-4.5.4. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise...

CVE-2026-83439

CVE-2026-83439 affects the helidon-security-providers-idcs-mapper component of Oracle Helidon (Fusion Middleware), versions 3.0.0–3.2.20 and 4.0.0–4.5.4 . A low-privileged attacker with network access via HTTP can exploit this vulnerability to achieve unauthorized creation, deletion, or modificat...

CVE-2026-83424

Oracle JDeveloper (component of Oracle Fusion Middleware) versions 12.2.1.4.0 and 14.1.2.0.0 are affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the product. Successful exploitation results in unauthorized access to critical data or c...

CVE-2026-83423

Oracle JDeveloper (Oracle Fusion Middleware, component: Security Framework ) is vulnerable in supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability with low complexity and no user interaction to achieve full takeover o...

EUVD-2026-79715

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle...

EUVD-2026-79712

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware component: Core. Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence...

EUVD-2026-79708

Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of Oracle Enterprise Manager component: Metrics. Supported versions that are affected are 13.5 and 24.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...

CVE-2026-83355

Oracle Enterprise Manager for Fusion Middleware (component: Metrics ) in supported versions 13.5 and 24.1 contains a critical vulnerability that allows an unauthenticated attacker with network access via HTTP to fully compromise the product, resulting in takeover with high impact to confidentiali...

CVE-2026-83346

CVE-2026-83346 is a vulnerability in the Framework component of Oracle Fusion Middleware Control , affecting supported versions 12.2.1.4.0 and 14.1.2.0.0 . A low-privileged attacker with network access via HTTP can exploit this vulnerability, though successful exploitation requires user interacti...

EUVD-2026-79699

Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion Middleware component: Framework. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

EUVD-2026-79692

Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware component: Client Bundle. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise...

EUVD-2026-79687

Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middleware component: Web Services Security. Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via SOAP to compromise...

CVE-2026-83330

CVE-2026-83330 is a Denial of Service vulnerability in the WebSocket component of Helidon (Oracle Fusion Middleware), affecting versions 4.0.0 through 4.5.4 . An unauthenticated remote attacker with network access via HTTP can cause a hang or frequently repeatable crash (complete DoS) of the affe...

CVE-2026-83281

CVE-2026-83281 is a Denial-of-Service vulnerability in Oracle Fusion Middleware Helidon , specifically the helidon-webserver component, affecting versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via TCP can cause a hang or frequently repeatable crash, resulting in a ...

EUVD-2026-79632

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver-http2. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of...

CVE-2026-83276

CVE-2026-83276 affects the helidon-webclient-http2 component of Oracle Helidon (part of Oracle Fusion Middleware), versions 4.0.0 through 4.5.4 . An unauthenticated attacker with network access via HTTP/2 can trigger a hang or frequently repeatable crash, resulting in a complete denial of service...