Approved changes feed: RSS · Atom

cpe:2.3:a:oracle_corporation:helidon:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOracle Corporation (5277d41a-eb16-5c58-a20b-58d92ce4ed28)
ProductHelidon (12c1d455-fcee-50dc-8393-e26463e2a03f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-87289 vulnerable 2026-09-16 04:33:01.629619 Details available
HIGH (7.5)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-static-content). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Published: 2026-09-15T20:06:40.783Z
Updated: 2026-09-15T23:14:51.751Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-83276 vulnerable 2026-09-16 04:32:49.203184 Details available
HIGH (7.5)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Published: 2026-09-15T20:04:43.115Z
Updated: 2026-09-15T23:14:53.730Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-83280 vulnerable 2026-09-16 04:32:48.977382 Details available
HIGH (7.5)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webserver-http2). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Published: 2026-09-15T20:04:44.378Z
Updated: 2026-09-15T23:14:53.586Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-83459 vulnerable 2026-09-16 04:32:48.937625 Details available
MEDIUM (5.3)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-media-multipart). Supported versions that are affected are 3.0.0-3.2.20. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 5.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L).
Published: 2026-09-15T20:05:42.515Z
Updated: 2026-09-15T23:12:26.727Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-83330 vulnerable 2026-09-16 04:32:48.889472 Details available
HIGH (7.5)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: WebSocket). Supported versions that are affected are 4.0.0-4.5.4. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Published: 2026-09-15T20:05:17.668Z
Updated: 2026-09-15T23:14:53.284Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-83281 vulnerable 2026-09-16 04:32:48.604406 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-21404 vulnerable 2026-06-08 05:40:01.421026 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.