CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.19)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 3.2.19. Difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Helidon accessible data.
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. Easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to perform unauthorized read access to a subset of Helidon accessible data.
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.1. Easily exploitable flaw allows an unauthenticated attacker with network access via HTTP to perform unauthorized update, insert or delete access to some Helidon accessible data, as well as unauthorized read access to a subset of data.
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.1. Difficult to exploit flaw allows an unauthenticated attacker with network access via HTTP to perform unauthorized update, insert or delete access to some Helidon accessible data, as well as unauthorized read access to a subset of data.
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.1. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impact).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 3.2.19. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impact).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to perform unauthorized update, insert or delete access to some Helidon accessible data as well as unauthorized read access to a subset. Attack requires user interaction and may impact additional products (scope change). CVSS 3.1 Base Score 6.1 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to perform unauthorized update, insert or delete access to some Helidon accessible data as well as unauthorized read access to a subset. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP/2 to gain unauthorized read access to a subset of Helidon accessible data and cause partial denial of service. CVSS 3.1 Base Score 6.5 (Confidentiality and Availability impacts).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 3.2.18. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impact).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to perform unauthorized update, insert or delete access to some Helidon accessible data as well as unauthorized read access to a subset. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to perform unauthorized update, insert or delete access to some Helidon accessible data as well as unauthorized read access to a subset. CVSS 3.1 Base Score 6.5 (Confidentiality and Integrity impacts).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impact).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impact).
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. A low-privileged attacker can remotely exploit via HTTP to gain unauthorized update and read access to some data.
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.1. A high-privileged attacker with local access can gain complete access to Helidon data.
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 3.2.18. An unauthenticated attacker can remotely access via HTTP to read a subset of data.
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. A low-privileged attacker can remotely exploit via HTTP to gain unauthorized update and read access to some data.
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 3.2.18. A low-privileged attacker can remotely exploit via HTTP under difficult conditions to gain unauthorized update and read access to some data.
Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) version 4.5.0. An unauthenticated attacker can remotely access via HTTP to read a subset of data.