CVE Vulnerability Catalog

Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) affecting versions 4.0.0-4.4.1. A low privileged attacker with network access via HTTP can exploit this. Successful attacks can result in unauthorized update, insert, or delete access to some Helidon accessible data, as well as unauthorized read access to a subset of that data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).

Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) affects versions 4.0.0-4.5.0. It is easily exploitable, allowing a high privileged attacker with logon to the infrastructure where Helidon executes to compromise Helidon. Successful attacks can result in unauthorized access to critical data or complete access to all Helidon accessible data.

Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) in versions 3.0.0-3.2.17. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon accessible data. CVSS 5.3 (Confidentiality impact).

Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) affects versions 4.0.0-4.4.1. It is easily exploitable, allowing a low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks can result in unauthorized update, insert, or delete access to some Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data.

Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) affects versions 3.0.0-3.2.17. It is difficult to exploit, allowing a low privileged attacker with network access via HTTP to compromise Helidon. Successful attacks can result in unauthorized update, insert, or delete access to some Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data.

Vulnerability in Oracle Fusion Middleware Helidon (component: Imperative Web Server) versions 4.0.0-4.4.1. Easily exploitable by unauthenticated attacker with network access via HTTP. Successful attacks can result in unauthorized read access to a subset of data. CVSS 5.3.

Vulnerability in Oracle Fusion Middleware Helidon (component: Imperative Web Server) versions 3.0.0-3.2.17. Easily exploitable by unauthenticated attacker with network access via HTTP. Successful attacks can result in unauthorized read access to a subset of data. CVSS 5.3.

Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) affects versions 4.0.0-4.4.1. It is easily exploitable, allowing an unauthenticated attacker with network access via HTTP to compromise Helidon, but requires user interaction. Attacks may significantly impact additional products (scope change) and can result in unauthorized update, insert, or delete access to some Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data.

Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) affects versions 3.0.0-3.2.17. It is easily exploitable, allowing an unauthenticated attacker with network access via HTTP to compromise Helidon, but requires user interaction. Attacks may significantly impact additional products (scope change) and can result in unauthorized update, insert, or delete access to some Helidon accessible data as well as unauthorized read access to a subset of Helidon accessible data.

Vulnerability in Oracle Fusion Middleware Helidon (component: Imperative Web Server) versions 4.0.0-4.4.1. Easily exploitable by unauthenticated attacker with network access via HTTP. Successful attacks can result in unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data. CVSS 6.5.

Vulnerability in Oracle Fusion Middleware Helidon (component: Imperative Web Server) versions 3.0.0-3.2.17. Easily exploitable by unauthenticated attacker with network access via HTTP. Successful attacks can result in unauthorized update, insert or delete access to some data and unauthorized read access to a subset of data. CVSS 6.5.

Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) affecting versions 3.0.0-3.2.17. A low privileged attacker with network access via HTTP can exploit this. Successful attacks can result in unauthorized update, insert, or delete access to some Helidon accessible data, as well as unauthorized read access to a subset of that data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts).

Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) in versions 3.0.0-3.2.17. Difficult to exploit flaw allows unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or complete access to all Helidon accessible data as well as unauthorized update, insert or delete access to some Helidon accessible data. CVSS 6.5 (Confidentiality and Integrity impacts).

A vulnerability in the Helidon product of Oracle Fusion Middleware (component: Imperative Web Server) affects versions 3.0.0-3.2.17. It is easily exploitable by an unauthenticated attacker with network access via HTTP, potentially leading to a partial denial of service (partial DoS). CVSS 3.1 Base Score is 5.3 (Availability impacts).

Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) in versions 3.0.0-3.2.17 and 4.0.0-4.4.1. Easily exploitable flaw allows unauthenticated attacker with network access via HTTP to gain unauthorized read access to a subset of Helidon accessible data. CVSS 5.3 (Confidentiality impact).

Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) affecting versions 3.0.0-3.2.18. An unauthenticated attacker with network access via HTTP can exploit this. Successful attacks can result in unauthorized update, insert, or delete access to some Helidon accessible data. CVSS 3.1 Base Score 5.3 (Integrity impacts).

Vulnerability in Oracle Fusion Middleware Helidon product (component: Imperative Web Server) affects versions 4.0.0-4.4.1. It is easily exploitable, allowing a low privileged attacker with logon to the infrastructure where Helidon executes to compromise Helidon. Successful attacks can result in unauthorized access to critical data or complete access to all Helidon accessible data as well as unauthorized update, insert, or delete access to some Helidon accessible data.

Vulnerability in Oracle VM VirtualBox (component: Core) version 7.2.14. Difficult to exploit by low-privileged attacker with logon to infrastructure, allows unauthorized access to critical data or complete access to all data. May impact additional products (scope change). CVSS score 5.6.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Difficult to exploit by low-privileged attacker with logon to infrastructure, requires human interaction. Allows unauthorized update, insert or delete of some data, unauthorized read access to a subset of data, and partial denial of service. CVSS score 4.2.

Vulnerability in Oracle Hyperion Financial Management (component: Security) version 11.2.25.0.000. Easily exploitable by unauthenticated attacker via HTTP, allows unauthorized read access to a subset of data. CVSS score 5.3.