Oracle Coherence vulnerabilities

101 known CVE vulnerabilities in Oracle Coherence, translated and rated.

CVE-2026-60308Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker via HTTP to fully compromise the system. The attack is easy to perform.
CVE-2026-60306Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker via TCP to fully compromise the system. The attack is easy to perform.
CVE-2026-60302Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the system via TCP.
CVE-2026-60300Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the system via TCP.
CVE-2026-60299Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the system via TCP.
CVE-2026-60298Critical
Vulnerability in Oracle Coherence (component: Core) versions 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via TCP can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
CVE-2026-60297Critical
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via TCP can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
CVE-2026-60296Critical
Critical vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the server via network using TCP. The attack does not impact other products (no scope change).
CVE-2026-60290Critical
Vulnerability in Oracle Coherence (component: Core) versions 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via HTTP can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
CVE-2026-60289Critical
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via HTTP can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
CVE-2026-60288Critical
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via TCP can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
CVE-2026-60287Critical
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via TCP can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
CVE-2026-60286Critical
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via HTTP can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
CVE-2026-60285Critical
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via TCP can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
CVE-2026-60280Critical
Vulnerability in Oracle Coherence (component: Core) versions 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via HTTP/2 can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
CVE-2026-60279Critical
Vulnerability in Oracle Coherence (component: Core). Unauthenticated attacker via network (HTTP) can take over the system.
CVE-2026-60278Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker with network access via HTTP to take over the system.
CVE-2026-60276Critical
Vulnerability in Oracle Coherence (component: Core). Unauthenticated attacker via network (HTTPS) can take over the system.
CVE-2026-60275Critical
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via HTTP can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
CVE-2026-60274Critical
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
CVE-2026-60272Critical
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via HTTP.
CVE-2026-60269Critical
Vulnerability in Oracle Coherence (component: Core). Unauthenticated attacker via network (TCP) can take over the system.
CVE-2026-60267Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker via TLS to unauthorizedly create, delete, or modify critical data and gain full access to all data.
CVE-2026-60264Critical
Vulnerability in Oracle Coherence (component: Core). Unauthenticated attacker via network (HTTP/2) can take over the system.
CVE-2026-60262Critical
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
CVE-2026-60259Critical
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via HTTP.
CVE-2026-60258Critical
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
CVE-2026-60257Critical
Vulnerability in Oracle Coherence (component: Core) versions 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
CVE-2026-60256Critical
Vulnerability in Oracle Coherence (component: Core) versions 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
CVE-2026-60254Critical
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
CVE-2026-60253Critical
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
CVE-2026-60251Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker with network access via TCP to take over the system.
CVE-2026-60250Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker with network access via TCP to take over the system.
CVE-2026-60249Critical
Vulnerability in Oracle Coherence (Core component) allows a low-privileged attacker with access to the physical communication segment to take over the product. Attacks may impact additional products (scope change).
CVE-2026-60248Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker with logon to the infrastructure to take over the product. Attacks may impact additional products (scope change).
CVE-2026-60247Critical
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0 and 14.1.1.0.0. An unauthenticated attacker can remotely compromise the system via HTTP.
CVE-2026-60246Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker with network access via TCP to take over the system.
CVE-2026-60244Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker with network access via HTTP to take over the system.
CVE-2026-60242Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the system via HTTP. The attack is easy to perform and requires no privileges.
CVE-2026-60241Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker with network access via HTTP to take over the system.
CVE-2026-60240Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the system via TCP. The attack is easy to perform and requires no privileges.
CVE-2026-60239Critical
Vulnerability in Oracle Coherence (Core component) allows a low-privileged attacker via HTTP to gain unauthorized access to critical data and modify it. The attack impacts additional products (scope change).
CVE-2026-60236Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the system via TCP. The attack is easy to perform and requires no privileges.
CVE-2026-60234Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the system via TCP. The attack is easy to perform and requires no privileges.
CVE-2026-60232Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker via HTTP to fully compromise the system. No user interaction is required.
CVE-2026-60230Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the system via TCP. The attack is easy to perform and requires no privileges.
CVE-2026-60229Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the system via TCP. The attack is easy to perform and requires no privileges.
CVE-2026-60228Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the system via TCP. The attack is easy to perform and requires no privileges.
CVE-2026-60227Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the system via TCP. The attack is easy to perform and requires no privileges.
CVE-2026-60226Critical
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the system via TCP. The attack is easy to perform and requires no privileges.