CVE-2026-60853

LowCVSS 3.7

Published: 18/08/2026(UTC)Translated: 19/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.27%

19th percentile - higher than 19% of all known CVEs

Summary

Vulnerability in Helidon (component: Imperative Web Server) version 3.2.20. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized read access to a subset of accessible data.

Risk Assessment

Risk of confidentiality breach in Helidon. An attacker may gain unauthorized access to some data.

Recommendation

Apply Oracle patches for version 3.2.20. Restrict network access to the server and monitor HTTP logs.

Original NVD description (English source)

Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 3.2.20. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).