Approved changes feed: RSS · Atom
cpe:2.3:a:oracle:helidon:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Oracle (3509f9eb-d8a0-57da-b153-b8021021b133) |
|---|---|
| Product | Helidon (8d9289a1-3618-5994-929b-1c506d30ad0d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/oracle/helidon |
purl2cpe | 2026-06-01 10:18:13.870006 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-87289 |
vulnerable | 2026-09-16 04:33:01.630885 |
Details available
HIGH (7.5)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Published: 2026-09-15T20:06:40.783Z
Updated: 2026-09-15T23:14:51.751Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-83276 |
vulnerable | 2026-09-16 04:32:49.203776 |
Details available
HIGH (7.5)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Published: 2026-09-15T20:04:43.115Z
Updated: 2026-09-15T23:14:53.730Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-83280 |
vulnerable | 2026-09-16 04:32:48.977942 |
Details available
HIGH (7.5)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Published: 2026-09-15T20:04:44.378Z
Updated: 2026-09-15T23:14:53.586Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-83459 |
vulnerable | 2026-09-16 04:32:48.938181 |
Details available
MEDIUM (5.3)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-media-multipart). Supported versions that are affected are 3.0.0-3.2.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Published: 2026-09-15T20:05:42.515Z
Updated: 2026-09-15T23:12:26.727Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-83330 |
vulnerable | 2026-09-16 04:32:48.890063 |
Details available
HIGH (7.5)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Published: 2026-09-15T20:05:17.668Z
Updated: 2026-09-15T23:14:53.284Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-83281 |
vulnerable | 2026-09-16 04:32:48.605299 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.