cbcvebase.
CVE-2020-2915
published 2020-04-15

CVE-2020-2915: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, CacheStore, Invocation). Supported versions that are affected…

PriorityP261critical9.8CVSS 3.1
AVNACLPRNUINSUCHIHAH
EPSS
1.96%
78.1th percentile
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, CacheStore, Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected

8 ranges
VendorProductVersion rangeFixed in
oraclecoherence——
oraclecoherence——
oraclecoherence——
oraclecoherence——
oracle_corporationcoherence——
oracle_corporationcoherence——
oracle_corporationcoherence——
oracle_corporationcoherence——

Detection & IOCsextracted from sources · hover to see the quote

  • →CVE-2020-2915 exploits Oracle Coherence via the IIOP and T3 protocols; monitor for unexpected IIOP or T3 traffic targeting Oracle Coherence services ↗
  • →Affected components are Caching, CacheStore, and Invocation within Oracle Coherence; focus detection on deserialization or invocation abuse over T3/IIOP on these components ↗
  • →Successful exploitation results in full takeover; treat any unauthenticated remote T3/IIOP connection to Oracle Coherence as high-severity and alert on it ↗
  • ·Affected Oracle Coherence versions are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, and 12.2.1.4.0; detections should be scoped to these versions ↗
  • ·The attack vector is network-based with no authentication, no user interaction, and low complexity required — perimeter controls alone are insufficient ↗

CVSS provenance

nvdv3.19.8CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv3.09.8CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
vendor_oracle9.8CRITICAL
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.