Threats tagged 'ghsa-hvpf-xwmf-xgpx'

A vulnerability in the WebSocket component of Oracle Fusion Middleware's Helidon product (versions 4.0.0 through 4.5.4) allows an unauthenticated attacker with network access via HTTP to cause a partial denial of service. The vulnerability has a CVSS 3.1 base score of 5.3, indicating a medium severity impact focused on availability. Oracle has addressed this vulnerability in their September 2026 Critical Security Patch Update.