CVE-2026-73889
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk24th percentile - higher than 24% of all known CVEs
Summary
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impact).
Risk Assessment
Risk involves potential unauthorized data access, possibly leading to information disclosure. Attack requires no authentication or user interaction, increasing exploitability.
Recommendation
Apply the vendor-provided patch or upgrade Helidon to a fixed version. Restrict network access to the server to reduce exposure.
Original NVD description (English source)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 4.5.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).