Oracle Helidon vulnerabilities

Vulnerability in Oracle Helidon (component helidon-cors) versions 3.0.0-3.2.21. Easily exploitable by an unauthenticated attacker with network access via HTTP, leading to unauthorized modification and read access to data and impact on other products.

Vulnerability in Oracle Helidon (component helidon-common-mapper) versions 4.0.0-4.5.5 and 27.0.0. Difficult to exploit, allows an unauthenticated attacker with network access via HTTP to cause unauthorized modification of data, partial read access, and partial DOS.

Vulnerability in Oracle Helidon (component helidon-grpc-server) versions 3.0.0-3.2.21. Easily exploitable by an unauthenticated attacker with network access via HTTP/2, leading to unauthorized modification and read access to data and impact on other products.

Vulnerability in Oracle Helidon (component helidon-webclient-http2) versions 4.0.0-4.5.5 and 27.0.0. Easily exploitable by an unauthenticated attacker with network access via HTTP/2, leading to a hang or frequently repeatable crash (complete DOS).