Oracle Coherence vulnerabilities

CVE-2026-60257 [CRITICAL] CWE-306 CVE-2026-60257: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result

CVE-2026-60256 [CRITICAL] CWE-306 CVE-2026-60256: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result

CVE-2026-60232 [CRITICAL] CWE-306 CVE-2026-60232: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result

CVE-2026-60280 [CRITICAL] CWE-306 CVE-2026-60280: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Oracle Coherence. Successful attacks of this vulnerability can resu

CVE-2020-2915 [CRITICAL] CVE-2020-2915: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, Cache Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, CacheStore, Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle Coherence. Successful attacks o

CVE-2022-21420 [CRITICAL] CVE-2022-21420: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Support Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeo

CVE-2026-60239 [CRITICAL] CWE-284 CVE-2026-60239: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence. While the vulnerability is in Oracle Coh

CVE-2026-60267 [CRITICAL] CWE-284 CVE-2026-60267: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Coherence. Successful attacks of this vulnerability

CVE-2026-35306 [CRITICAL] CWE-284 CVE-2026-35306: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Th Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Third Party Jars). The supported version that is affected is 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. While the vulnerability is in Oracle Coherence, atta

CVE-2026-35305 [CRITICAL] CWE-284 CVE-2026-35305: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Th Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Third Party Jars). The supported version that is affected is 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. While the vulnerability is in Oracle Coherence, atta

CVE-2026-83410 [HIGH] CWE-269 CVE-2026-83410: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise Oracle Coherence. Successful attacks of this vul

CVE-2026-83411 [HIGH] CWE-269 CVE-2026-83411: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in t

CVE-2026-60218 [HIGH] CWE-306 CVE-2026-60218: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can

CVE-2026-60268 [HIGH] CWE-284 CVE-2026-60268: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can

CVE-2020-25649 [HIGH] CWE-611 CVE-2020-25649: A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured prope A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly. This flaw allows vulnerability to XML external entity (XXE) attacks. The highest threat from this vulnerability is data integrity.

CVE-2026-60220 [CRITICAL] CWE-284 CVE-2026-60220: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Coherence. Successful attacks require human interac

CVE-2026-60295 [HIGH] CWE-284 CVE-2026-60295: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. While the vulnerability is in Oracle Coherence, attacks

CVE-2026-60248 [CRITICAL] CWE-269 CVE-2026-60248: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle Coherence. Whi

CVE-2026-60235 [HIGH] CWE-306 CVE-2026-60235: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The s Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized ability to caus

CVE-2026-60284 [HIGH] CWE-284 CVE-2026-60284: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability ca