cbcvebase.

Oracle Coherence vulnerabilities

129 known vulnerabilities affecting oracle/coherence.

Total CVEs
129
CISA KEV
1
actively exploited
Public exploits
2
Exploited in wild
2
Severity breakdown
CRITICAL73HIGH34MEDIUM20LOW2

Vulnerabilities

Page 6 of 7
CVE-2021-2371P3HIGHCVSS 7.5v3.7.1.0v12.1.3.0.0+3 more2021-07-21
CVE-2021-2371 [HIGH] CVE-2021-2371: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Support Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Coherence. Successful attacks of this vulnerabilit
nvd
CVE-2022-21570P3HIGHCVSS 7.5v3.7.1.0v12.2.1.3.0+2 more2022-07-19
CVE-2022-21570 [HIGH] CVE-2022-21570: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Support Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 3.7.1.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Coherence. Successful attacks of this vulnerability can resu
nvd
CVE-2026-60271P3HIGHCVSS 7.8v12.2.1.4.0v14.1.1.0.0+2 more2026-07-21
CVE-2026-60271 [HIGH] CWE-269 CVE-2026-60271: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle Coherence. Successf
nvd
CVE-2021-37136P3HIGHCVSS 7.5v12.2.1.4.0v14.1.1.0.02021-10-19
CVE-2021-37136 [HIGH] CWE-400 CVE-2021-37136: The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression). All users of Bzip2Decoder are affected. The malicious input can trigger an OOME and so a DoS attack
nvd
CVE-2026-60305P3HIGHCVSS 7.1v12.2.1.4.0v14.1.1.0.0+2 more2026-07-21
CVE-2026-60305 [HIGH] CWE-284 CVE-2026-60305: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can
nvd
CVE-2026-60213P3MEDIUMCVSS 6.5v14.1.1.0.0v14.1.2.0.0+1 more2026-07-21
CVE-2026-60213 [MEDIUM] CWE-400 CVE-2026-60213: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result
nvd
CVE-2020-36518P3HIGHCVSS 7.5v14.1.1.0.02022-03-11
CVE-2020-36518 [HIGH] CWE-787 CVE-2020-36518: jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a lar jackson-databind before 2.13.0 allows a Java StackOverflow exception and denial of service via a large depth of nested objects.
nvd
CVE-2026-60266P3MEDIUMCVSS 5.9v12.2.1.4.0v14.1.1.0.0+2 more2026-07-21
CVE-2026-60266 [MEDIUM] CWE-200 CVE-2026-60266: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via TLS to compromise Oracle Coherence. Successful attacks of this vulnerability
nvd
CVE-2026-60245P3HIGHCVSS 7.2v12.2.1.4.0v14.1.1.0.0+2 more2026-07-21
CVE-2026-60245 [HIGH] CWE-284 CVE-2026-60245: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle Coherence. Succes
nvd
CVE-2026-60243P3MEDIUMCVSS 6.5v12.2.1.4.0v14.1.1.0.0+2 more2026-07-21
CVE-2026-60243 [MEDIUM] CWE-400 CVE-2026-60243: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability ca
nvd
CVE-2026-60304P3MEDIUMCVSS 6.5v12.2.1.4.0v14.1.1.0.0+2 more2026-07-21
CVE-2026-60304 [MEDIUM] CWE-284 CVE-2026-60304: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability ca
nvd
CVE-2021-43797P3MEDIUMCVSS 6.5v12.2.1.4.0v14.1.1.0.02021-12-09
CVE-2021-43797 [MEDIUM] CWE-444 CVE-2021-43797: Netty is an asynchronous event-driven network application framework for rapid development of maintai Netty is an asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. Netty prior to version 4.1.71.Final skips control chars when they are present at the beginning / end of the header name. It should instead fail fast as these are not allowed by the spec and could lead
nvd
CVE-2021-21409P3MEDIUMCVSS 5.9v12.2.1.4.0v14.1.1.0.02021-03-30
CVE-2021-21409 [MEDIUM] CWE-444 CVE-2021-21409: Netty is an open-source, asynchronous event-driven network application framework for rapid developme Netty is an open-source, asynchronous event-driven network application framework for rapid development of maintainable high performance protocol servers & clients. In Netty (io.netty:netty-codec-http2) before version 4.1.61.Final there is a vulnerability that enables request smuggling. The content-length header is not correctly validated if the requ
nvd
CVE-2026-60270P3MEDIUMCVSS 5.5v12.2.1.4.0v14.1.1.0.0+2 more2026-07-21
CVE-2026-60270 [MEDIUM] CWE-284 CVE-2026-60270: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows high privileged attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability
nvd
CVE-2026-60238P4MEDIUMCVSS 5.4v12.2.1.4.0v14.1.1.0.0+2 more2026-07-21
CVE-2026-60238 [MEDIUM] CWE-284 CVE-2026-60238: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. While the vulnerability is in Oracle Co
nvd
CVE-2026-60260P4MEDIUMCVSS 5.3v12.2.1.4.0v14.1.1.0.0+2 more2026-07-21
CVE-2026-60260 [MEDIUM] CWE-200 CVE-2026-60260: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability
nvd
CVE-2026-60283P4MEDIUMCVSS 5.3v12.2.1.4.0v14.1.1.0.0+2 more2026-07-21
CVE-2026-60283 [MEDIUM] CWE-200 CVE-2026-60283: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability
nvd
CVE-2026-60282P4MEDIUMCVSS 5.4v12.2.1.4.0v14.1.1.0.0+2 more2026-07-21
CVE-2026-60282 [MEDIUM] CWE-284 CVE-2026-60282: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability ca
nvd
CVE-2026-60231P4MEDIUMCVSS 5.4v12.2.1.4.0v14.1.1.0.0+2 more2026-07-21
CVE-2026-60231 [MEDIUM] CWE-284 CVE-2026-60231: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability c
nvd
CVE-2026-60237P4MEDIUMCVSS 5.3v12.2.1.4.0v14.1.1.0.0+2 more2026-07-21
CVE-2026-60237 [MEDIUM] CWE-200 CVE-2026-60237: Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Suppor Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in
nvd
← Previous6 / 7Next →
Oracle Coherence vulnerabilities | cvebase