CVE-2026-101583 is a vulnerability in Oracle Helidon versions 4.0.0 through 4.5.5 and 27.0.0. It allows an unauthenticated attacker with network access via HTTP to potentially create, delete, or modify critical or all accessible data, read a subset of data without authorization, and cause a partial denial of service. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 7.0, indicating high severity.
CVE-2026-101582 is a vulnerability in Oracle Helidon versions 4.0.0 through 4.5.5 that allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some Helidon accessible data. The vulnerability has a CVSS 3.1 base score of 5.8, indicating a medium severity with confidentiality impact only. The vulnerability may also affect additional products due to scope change. Oracle has released patches for this vulnerability as part of its October 2026 Critical Patch Update.
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-dns-resolver-round-robin). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via DNS to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).
CVE-2026-101580 is a vulnerability in Oracle Helidon versions 4.0.0 through 4.5.5 and version 27.0.0. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some Helidon accessible data. The vulnerability has a CVSS 3.1 base score of 5.8, indicating a medium severity with confidentiality impact only. The vulnerability may also affect additional products due to scope change. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which provides patches for affected versions.
CVE-2026-101579 is a high-severity vulnerability in Oracle Helidon versions 3.0.0 through 3.2.21. It allows an unauthenticated attacker with network access via HTTP/2 to compromise Helidon, potentially leading to unauthorized read, update, insert, or delete access to some Helidon accessible data. The vulnerability also has a scope change impact, potentially affecting additional products beyond Helidon. The CVSS 3.1 base score is 7.2, reflecting confidentiality and integrity impacts without availability impact. Oracle has released patches addressing this vulnerability as part of its October 2026 Critical Patch Update. Users are strongly advised to apply these patches promptly.
CVE-2026-101578 is a vulnerability in Oracle Helidon versions 4.0.0 through 4.5.5 affecting the helidon-security-providers-google-login component. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some Helidon accessible data. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity with confidentiality impact only. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which provides patches for affected versions.
CVE-2026-101577 is a vulnerability in Oracle Helidon versions 4.0.0 through 4.5.5 affecting the helidon-cors component. It allows an unauthenticated attacker with network access via HTTP to potentially perform unauthorized update, insert, or delete operations on accessible data. Exploitation is difficult and requires human interaction from a person other than the attacker. The vulnerability has a low CVSS 3.1 base score of 3.1, indicating limited impact primarily on data integrity.
CVE-2026-101576 is a vulnerability in Oracle Helidon versions 4.0.0 through 4.5.5 that allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of accessible data. The vulnerability is rated as low severity with a CVSS 3.1 base score of 3.7, reflecting limited confidentiality impact and no impact on integrity or availability.
CVE-2026-101575 is a vulnerability in Oracle Fusion Middleware's Helidon component (LRA) affecting versions 4.0.0 through 4.5.5. It allows an unauthenticated attacker with network access via HTTP to perform unauthorized read, update, insert, or delete operations on some Helidon accessible data and cause a partial denial of service. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 6.5, indicating medium severity. The vulnerability may also impact additional products beyond Helidon due to scope change. Oracle has released security patches addressing this vulnerability as part of its October 2026 Critical Patch Update.
CVE-2026-101574 is a vulnerability in Oracle Fusion Middleware's Helidon product, specifically in the OIDC component. It affects Helidon versions 4.0.0 through 4.5.5 and version 27.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Helidon, but exploitation is difficult and requires human interaction from a third party. Successful exploitation can lead to unauthorized access to critical or all Helidon-accessible data and unauthorized modification of some data. The vulnerability has a CVSS 3.1 base score of 6.9, indicating a medium severity level. Oracle has released patches for affected versions as part of its October 2026 Critical Patch Update.
CVE-2026-101573 is a vulnerability in Oracle Helidon affecting versions 3.0.0 through 3.2.21, 4.0.0 through 4.5.5, and 27.0.0. It allows an unauthenticated attacker with network access via HTTP to compromise Helidon, potentially leading to unauthorized access to critical or all accessible data. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 6.8, indicating medium severity. Oracle has included this vulnerability in its October 2026 Critical Patch Update, providing patches for the affected versions. Users are strongly advised to apply these patches promptly.
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-webclient-http2). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Helidon. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
CVE-2026-101571 is a vulnerability in Oracle Helidon versions 3.0.0 through 3.2.21 and 4.0.0 through 4.5.5. It allows a low privileged attacker with logon access to the infrastructure where Helidon runs to compromise Helidon. Successful exploitation can lead to unauthorized access to critical or all Helidon-accessible data. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 5.6, indicating medium severity. The vulnerability may also impact additional products beyond Helidon due to scope change.
CVE-2026-101570 is a vulnerability in Oracle Helidon versions 4.0.0 through 4.5.5 affecting the helidon-webserver-http2 component. It allows an unauthenticated attacker with network access via HTTP/2 to cause a partial denial of service (DoS). The vulnerability is rated as low severity with a CVSS 3.1 base score of 3.7, reflecting limited impact on availability. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, which provides patches for affected versions.
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-common-concurrency-limits). Supported versions that are affected are 4.0.0-4.5.5 and 27.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Helidon accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of Helidon. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).
CVE-2026-101568 is a vulnerability in Oracle Helidon affecting versions 3.0.0 through 3.2.21, 4.0.0 through 4.5.5, and version 27.0.0. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some Helidon accessible data. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity level. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory and provides patches for the affected versions.
Vulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost Planning). Supported versions that are affected are 12.2.3-12.2.15. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Cost Management. Successful attacks of this vulnerability can result in takeover of Oracle Cost Management. CVSS 3.1 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H).
CVE-2026-101566 is a vulnerability in Oracle Application Object Library versions 12.2.3 through 12.2.15. It allows a low privileged attacker with logon access to the infrastructure where the library executes to compromise the Oracle Application Object Library. The vulnerability has a CVSS 3.1 base score of 7.8, indicating high severity with impacts on confidentiality, integrity, and availability. Successful exploitation can lead to takeover of the Oracle Application Object Library component.
CVE-2026-101565 is a vulnerability in Oracle Agile PLM version 9.3.6 affecting the Import component. It allows an unauthenticated attacker with logon access to the infrastructure where Oracle Agile PLM runs to compromise the product. Successful exploitation can lead to unauthorized access to critical or all accessible data within Oracle Agile PLM. The CVSS 3.1 base score is 6.2, indicating a medium severity with high confidentiality impact but no integrity or availability impact.
CVE-2026-101564 is a vulnerability in Oracle Agile PLM version 2.6 that allows an unauthenticated attacker with network access via TLS to potentially gain unauthorized access to critical or all accessible data within the product. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 5.9, indicating a medium severity with a high confidentiality impact but no integrity or availability impact. Oracle has included this vulnerability in its October 2026 Critical Patch Update advisory, recommending customers apply patches promptly.