Oracle Coherence vulnerabilities

Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the system via HTTP. The attack is easy to perform and requires no privileges.

Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.

Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker via TCP to fully compromise the system. No user interaction is required.

Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker via TCP to gain unauthorized access to critical data and modify it. The attack requires user interaction and impacts additional products.

Vulnerability in Oracle Coherence (component: Core) versions 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.

Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP, with potential impact on additional products (scope change).

Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.

Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.

Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.

Vulnerability in Oracle Coherence (component: Core) versions 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.

Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.

Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0.

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0.

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to take control of Oracle Coherence. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0.

A vulnerability in the Oracle Coherence product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTPS to compromise Oracle Coherence. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0.

Vulnerability in Oracle Fusion Middleware Oracle Coherence product (component: Core) affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low privileged attacker with network access via HTTP can cause a partial denial of service (partial DoS) of Oracle Coherence.

Vulnerability in Oracle Coherence (Oracle Fusion Middleware), component Core, affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged authenticated attacker with HTTP network access can take over Oracle Coherence; the vulnerability is difficult to exploit. CVSS 3.1 Base Score 7.5.

Vulnerability in Oracle Coherence (component: Core) affecting version 15.1.1.0.0. A difficult-to-exploit flaw allows a low-privileged attacker with local logon to gain unauthorized read access to a subset of Oracle Coherence accessible data.

Vulnerability in Oracle Coherence (component: Core) affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A difficult-to-exploit flaw allows a high-privileged attacker with local logon to gain unauthorized update, insert, or delete access to some Oracle Coherence accessible data.

Vulnerability in Oracle Coherence (Oracle Fusion Middleware), component Core, affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged authenticated attacker with TCP network access can access data and create, delete, or modify data. CVSS 3.1 Base Score 8.1.

Vulnerability in Oracle Coherence (Core component) affecting versions 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via HTTP to compromise Oracle Coherence.

Vulnerability in Oracle Coherence (Core component) affecting versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An easily exploitable flaw allows a low-privileged attacker with network access via multiple protocols to compromise Oracle Coherence.

Vulnerability in Oracle Fusion Middleware Oracle Coherence product (component: Core) affects version 15.1.1.0.0. A low privileged attacker with network access via HTTP can gain unauthorized access to critical data or complete access to all Oracle Coherence accessible data, and attacks may impact additional products.

Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker with physical access to the communication segment to take over Coherence. The attack is easily exploitable.

Vulnerability in Oracle Coherence (component: Core). Affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Easily exploitable with low privileges and network access via HTTP. Successful attack allows unauthorized read access to a subset of data.

Vulnerability in Oracle Coherence allows a low-privileged attacker with network access via TCP to unauthorizedly create, delete, or modify critical data and read a subset of data. Exploitation is easy, with significant confidentiality and integrity impact.

Vulnerability in Oracle Coherence (component: Core) allows a low-privileged attacker with network access via HTTP to cause a partial denial of service (partial DOS). The attack is easy to exploit.

Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely cause a hang or frequent crash (complete DOS) via TCP. The attack is easily exploitable.

Vulnerability in Oracle Coherence (component: Core) versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker with network access via TCP can take over Coherence, also impacting other products.

Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker via HTTP to read all data and modify some data.

Vulnerability in Oracle Coherence (Core). An unauthenticated attacker via HTTP can read a subset of data.

Vulnerability in Oracle Coherence (Core component) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker with network access via TCP can gain unauthorized read and write (update/insert/delete) access to some data.

Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker with physical access to the communication segment to gain unauthorized access and modify critical data. The attack is easily exploitable.

Vulnerability in Oracle Coherence (component: Core). Difficult to exploit, allows an unauthenticated attacker with network access via TCP to take over Oracle Coherence.

Vulnerability in Oracle Coherence (component: Core). Difficult to exploit, allows an unauthenticated attacker with network access via TCP to take over Oracle Coherence.

Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker with local access can fully compromise the system.

Vulnerability in Oracle Coherence (component: Core) allows a high-privileged attacker to gain unauthorized access and modify critical data. The attack is easy, requires network access via HTTP.

Vulnerability in Oracle Coherence (component: Core) allows a low-privileged attacker with network access via TCP to compromise the system. No user interaction is required.

Vulnerability in Oracle Coherence (Core). Difficult to exploit, but an unauthenticated attacker via TLS can gain full access to data.

Vulnerability in Oracle Coherence (Core component) allows a high-privileged attacker with local access to gain unauthorized access to critical data. The attack may affect other products.

Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker via TCP to gain unauthorized access to all data. Exploitation is easy.

Vulnerability in Oracle Coherence (component: Core). Easily exploitable, allows an unauthenticated attacker with physical access to the communication segment to take over Oracle Coherence.

Vulnerability in Oracle Coherence (Core). An unauthenticated attacker via HTTP can read a subset of data.

Vulnerability in Oracle Coherence product of Oracle Fusion Middleware (Core component). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via TCP can easily exploit this flaw, causing a hang or frequently repeatable crash (complete DOS) of Oracle Coherence and unauthorized update, insert or delete access to some data.

Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely cause a hang or frequent crash (complete DOS) via TCP. The attack is easily exploitable.

Vulnerability in Oracle Coherence (part of Oracle Fusion Middleware, component: Core). The attack requires user interaction and is difficult to exploit, but can lead to unauthorized access and modification of critical data in other products. CVSS 7.2.

Vulnerability in Oracle Coherence (Core component). A low-privileged attacker via TCP can cause a hang or frequent crashes (full DOS).

Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Difficult to exploit, allows an unauthenticated attacker via HTTP to unauthorized read and modify data.