Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-webclient-http1 component. Unauthorized attackers may exploit these vulnerabilities to gain access via the HTTP network, resulting in certain types of...

Oracle Helidon security vulnerabilities

Security vulnerabilities exist in Oracle Helidon versions 4.0.0 through 4.5.5 and 27.0.0. These stem from issues in the helidon-webclient-http2 component and may allow unauthenticated attackers to access the service via HTTP/2 networks, potentially leading to service hangs or frequent crashes...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the OIDC component. Unauthorized attackers may gain access through the HTTP network, allowing them to access critical data or all accessible data under user interaction...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the WebSocket component, which may allow unauthorized attackers to access through the HTTP network and read certain accessible data without proper authorization...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-security-providers-google-login component. Unauthorized attackers may gain access through the HTTP network, allowing them to read certain data without proper authorization...

Oracle Helidon security vulnerabilities

Security vulnerabilities exist in Oracle Helidon versions 4.0.0 through 4.5.5 and 27.0.0. These vulnerabilities stem from issues within the helidon-security-providers-jwt component, potentially allowing unauthenticated attackers to access certain data accessible via HTTP without authorization...

Oracle Helidon security vulnerabilities

A security vulnerability exists in Oracle Helidon versions 3.0.0 through 3.2.21. This vulnerability stems from issues within the helidon-cors component and may allow unauthenticated attackers to access HTTP-based networks. It could enable unauthorized updates, insertions, or deletions of certain...

Oracle Helidon security vulnerabilities

Security vulnerabilities exist in Oracle Helidon versions 3.0.0 through 3.2.21, 4.0.0 through 4.5.5, and 27.0.0. These vulnerabilities stem from issues within the helidon-health component, potentially allowing unauthenticated attackers to access HTTP-based networks and read certain accessible dat...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-webclient-dns-resolver-round-robin component. They may allow unauthorized attackers to access the DNS network, enabling them to update, insert, or delete certai...

Oracle Helidon security vulnerabilities

Security vulnerabilities exist in Oracle Helidon versions 4.0.0 through 4.5.5 and 27.0.0. These vulnerabilities stem from issues in the helidon-common-mapper component, potentially allowing unauthenticated attackers to gain HTTP access. They may create, delete, or modify critical data or all...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 3.0.0 to 3.2.21 and 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-security-providers-idcs-mapper component. They may allow low-privilege attackers to log in and access infrastructure, unauthorized access to critical...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-webclient component. Unauthorized attackers may gain access through the HTTP network, allowing them to read unauthorized access to certain data available on...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-cors component. Unauthorized attackers may gain access through HTTP network interactions and exploit user interactions, resulting in unauthorized updates, insertions, or...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-integrations-vault component. They may allow unauthenticated attackers to access the HTTP network, enabling unauthorized reading of certain Helidon-accessible data, and ma...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 3.0.0 to 3.2.21 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-grpc-server component. Unauthorized attackers may gain access through HTTP/2 networks, allowing them to perform unauthorized updates, insert or delete certain accessible...

Oracle Helidon security vulnerabilities

Oracle Helidon versions 4.0.0 to 4.5.5 and 27.0.0 have security vulnerabilities. These vulnerabilities stem from issues with the helidon-webclient-websocket component. Unauthorized attackers may gain access through HTTP network connections, read certain accessible data without authorization, and...

Oracle Helidon authorization issue vulnerability

Oracle Helidon versions 4.0.0 to 4.5.5 have an authorization issue vulnerability. This vulnerability stems from issues with the helidon-microprofile-security component. It may allow unauthorized attackers to access through the HTTP network, to create, delete, or modify critical data or all data...

EUVD-2026-79683

Vulnerability in the Helidon product of Oracle Fusion Middleware component: WebSocket. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerabilit...

EUVD-2026-79633

Vulnerability in the Helidon product of Oracle Fusion Middleware component: helidon-webserver. Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Helidon. Successful attacks of this...

CVE-2026-83278

Oracle Helidon (part of Oracle Fusion Middleware), specifically the helidon-integrations-neo4j component, is affected in versions 3.0.0–3.2.20 and 4.0.0–4.5.4 . The vulnerability requires an unauthenticated attacker with access to the physical communication segment (adjacent network) and is rated...