CVE-2026-60853
LowCVSS 3.7Exploitation Probability (EPSS)
Low risk19th percentile - higher than 19% of all known CVEs
Summary
Vulnerability in Helidon (component: Imperative Web Server) version 3.2.20. A difficult-to-exploit flaw allows an unauthenticated attacker with network access via HTTP to compromise the system. Successful attacks can result in unauthorized read access to a subset of accessible data.
Risk Assessment
Risk of confidentiality breach in Helidon. An attacker may gain unauthorized access to some data.
Recommendation
Apply Oracle patches for version 3.2.20. Restrict network access to the server and monitor HTTP logs.
Original NVD description (English source)
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server). The supported version that is affected is 3.2.20. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Helidon. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Helidon accessible data. CVSS 3.1 Base Score 3.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N).