CVE-2026-83402

A vulnerability exists in the OIM Legacy UI component of the Oracle Identity Manager product within Oracle Fusion Middleware . Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTPS can easily exploit this flaw to compromise the Oracle Identi...

CVE-2026-83403

A vulnerability exists in the Oracle Identity Manager product of Oracle Fusion Middleware , specifically within the OIM Legacy UI component. Affected versions include 12.2.1.4.0 and 14.1.2.1.0 . A low-privileged attacker with network access via HTTP can easily exploit this flaw to compromise the ...

CVE-2026-83399

The Oracle WebLogic Server product (component: Core ) within Oracle Fusion Middleware is vulnerable in versions 12.2.1.4.0 , 14.1.1.0.0 , 14.1.2.0.0 , and 15.1.1.0.0 . An unauthenticated attacker with network access via T3 or IIOP can exploit this vulnerability to compromise the server. A success...

CVE-2026-83379

The Oracle Weblogic Server Proxy Plug-in (component: WebLogic Server Proxy Plug-In for Third-Party Web Servers) is affected by a vulnerability in supported versions 12.2.1.4.0 , 14.1.1.0.0 , and 14.1.2.0.0 . This difficult-to-exploit vulnerability allows an unauthenticated attacker with network a...

CVE-2026-101590

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-microprofile-security. Supported versions that are affected are 4.0.0-4.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks ...

CVE-2026-101590

The Helidon product within Oracle Fusion Middleware (specifically the helidon-microprofile-security component) is affected by a critical vulnerability in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise the system. Successf...

CVE-2026-101587

A vulnerability exists in the helidon-webclient-http1 component of the Helidon product within Oracle Fusion Middleware . The affected versions are 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to cause a partial denial of service (partial ...

CVE-2026-101587

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-http1. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful...

CVE-2026-101588

A vulnerability exists in the WebSocket component of the Helidon product within Oracle Fusion Middleware . Affected versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can easily exploit this flaw to compromise Helidon, potentially resulting in unaut...

CVE-2026-101586

The Helidon product of Oracle Fusion Middleware is affected by a vulnerability in the helidon-webclient component. Impacted versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this flaw to gain unauthorized read access to a subset of Heli...

CVE-2026-101584

The Helidon product of Oracle Fusion Middleware is vulnerable in the helidon-webclient-websocket component. Specifically, supported versions 4.0.0-4.5.5 and 27.0.0 are affected by a vulnerability that allows an unauthenticated attacker with network access via HTTP to compromise the system. Succes...

CVE-2026-101585

The Helidon product within Oracle Fusion Middleware (specifically the helidon-cors component) is affected by a vulnerability in versions 3.0.0-3.2.21 . An unauthenticated attacker with network access via HTTP can exploit this flaw to compromise Helidon, potentially gaining unauthorized read, upda...

CVE-2026-101583

A vulnerability exists in the helidon-common-mapper component of the Oracle Fusion Middleware Helidon product, specifically affecting versions 4.0.0-4.5.5 and 27.0.0 . This high-complexity vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the system. Succ...

CVE-2026-101582

The Helidon product of Oracle Fusion Middleware (specifically the helidon-integrations-vault component) is vulnerable in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this flaw to achieve unauthorized read access to a subset of Helidon accessible data...

CVE-2026-101579

The helidon-grpc-server component within the Helidon product of Oracle Fusion Middleware is affected by a vulnerability in versions 3.0.0-3.2.21 . An unauthenticated attacker with network access via HTTP/2 can easily exploit this issue to compromise the system. Successful exploitation may lead to...

CVE-2026-101580

A vulnerability exists in the helidon-security-providers-jwt component of the Oracle Fusion Middleware Helidon product. Affected versions include 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a ...

CVE-2026-101581

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webclient-dns-resolver-round-robin. Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via DNS to compromise...

CVE-2026-101581

The Helidon product of Oracle Fusion Middleware is affected by a vulnerability in the helidon-webclient-dns-resolver-round-robin component. This issue impacts supported versions 4.0.0-4.5.5 and 27.0.0 . An unauthenticated attacker with network access via DNS can exploit this vulnerability to comp...

CVE-2026-101578

A vulnerability exists in the Helidon product of Oracle Fusion Middleware, specifically within the helidon-security-providers-google-login component. Affected versions include 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorize...

CVE-2026-101576

The Helidon product of Oracle Fusion Middleware (specifically the LRA component) is affected by a vulnerability in versions 4.0.0-4.5.5 . An unauthenticated attacker with network access via HTTP can exploit this vulnerability to gain unauthorized read access to a subset of Helidon accessible data...