Oracle Coherence vulnerabilities

Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely take over the system via HTTP. The attack is easy to perform and requires no privileges.

Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.

Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker via TCP to fully compromise the system. No user interaction is required.

Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker via TCP to gain unauthorized access to critical data and modify it. The attack requires user interaction and impacts additional products.

Vulnerability in Oracle Coherence (component: Core) versions 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.

Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP, with potential impact on additional products (scope change).

Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.

Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.

Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.

Vulnerability in Oracle Coherence (component: Core) versions 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.

Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.

Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0.

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0.

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTP to take control of Oracle Coherence. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0.

A vulnerability in the Oracle Coherence product of Oracle Fusion Middleware allows an unauthenticated attacker with network access via HTTPS to compromise Oracle Coherence. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0.

Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker with physical access to the communication segment to take over Coherence. The attack is easily exploitable.

Vulnerability in Oracle Coherence (component: Core). Affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Easily exploitable with low privileges and network access via HTTP. Successful attack allows unauthorized read access to a subset of data.

Vulnerability in Oracle Coherence allows a low-privileged attacker with network access via TCP to unauthorizedly create, delete, or modify critical data and read a subset of data. Exploitation is easy, with significant confidentiality and integrity impact.

Vulnerability in Oracle Coherence (component: Core) allows a low-privileged attacker with network access via HTTP to cause a partial denial of service (partial DOS). The attack is easy to exploit.

Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely cause a hang or frequent crash (complete DOS) via TCP. The attack is easily exploitable.

Vulnerability in Oracle Coherence (component: Core) versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker with network access via TCP can take over Coherence, also impacting other products.

Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker via HTTP to read all data and modify some data.

Vulnerability in Oracle Coherence (Core). An unauthenticated attacker via HTTP can read a subset of data.

Vulnerability in Oracle Coherence (Core component) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker with network access via TCP can gain unauthorized read and write (update/insert/delete) access to some data.

Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker with physical access to the communication segment to gain unauthorized access and modify critical data. The attack is easily exploitable.

Vulnerability in Oracle Coherence (component: Core). Difficult to exploit, allows an unauthenticated attacker with network access via TCP to take over Oracle Coherence.

Vulnerability in Oracle Coherence (component: Core). Difficult to exploit, allows an unauthenticated attacker with network access via TCP to take over Oracle Coherence.

Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. A low-privileged attacker with local access can fully compromise the system.

Vulnerability in Oracle Coherence (component: Core) allows a high-privileged attacker to gain unauthorized access and modify critical data. The attack is easy, requires network access via HTTP.

Vulnerability in Oracle Coherence (component: Core) allows a low-privileged attacker with network access via TCP to compromise the system. No user interaction is required.

Vulnerability in Oracle Coherence (Core). Difficult to exploit, but an unauthenticated attacker via TLS can gain full access to data.

Vulnerability in Oracle Coherence (Core component) allows a high-privileged attacker with local access to gain unauthorized access to critical data. The attack may affect other products.

Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker via TCP to gain unauthorized access to all data. Exploitation is easy.

Vulnerability in Oracle Coherence (component: Core). Easily exploitable, allows an unauthenticated attacker with physical access to the communication segment to take over Oracle Coherence.

Vulnerability in Oracle Coherence (Core). An unauthenticated attacker via HTTP can read a subset of data.

Vulnerability in Oracle Coherence product of Oracle Fusion Middleware (Core component). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via TCP can easily exploit this flaw, causing a hang or frequently repeatable crash (complete DOS) of Oracle Coherence and unauthorized update, insert or delete access to some data.

Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker to remotely cause a hang or frequent crash (complete DOS) via TCP. The attack is easily exploitable.

Vulnerability in Oracle Coherence (part of Oracle Fusion Middleware, component: Core). The attack requires user interaction and is difficult to exploit, but can lead to unauthorized access and modification of critical data in other products. CVSS 7.2.

Vulnerability in Oracle Coherence (Core component). A low-privileged attacker via TCP can cause a hang or frequent crashes (full DOS).

Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Difficult to exploit, allows an unauthenticated attacker via HTTP to unauthorized read and modify data.

Vulnerability in Oracle Coherence (Core). An unauthenticated attacker via TCP can read a subset of data.

Vulnerability in Oracle Coherence (Core component) version 15.1.1.0.0 allows an unauthenticated attacker via TCP to cause DOS, modify and read some data.

Vulnerability in Oracle Coherence (component: Core) version 15.1.1.0.0. A low-privileged attacker with network access via TCP can cause a partial denial of service (partial DOS).

Vulnerability in Oracle Coherence (versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0) in the Core component. A low-privileged attacker via HTTP can gain unauthorized read and modify access to data.

Vulnerability in Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0. An unauthenticated attacker via TCP can cause a hang or repeatable crash (full DOS) of Oracle Coherence.

Vulnerability in Oracle Coherence product of Oracle Fusion Middleware (component: Core). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via T3 or IIOP to compromise Oracle Coherence, potentially leading to a takeover.

Vulnerability in Oracle Fusion Middleware's Oracle Coherence product (component: Core). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via TCP to compromise Oracle Coherence.

Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 have an easily exploitable vulnerability that allows an attacker with low privileges and access to the communication segment to compromise data confidentiality and integrity. The attack may affect other products.

Vulnerability in Oracle Coherence (component: Core) allows an unauthenticated attacker to cause a hang or crash (DOS) and modify data. The attack is difficult, requires network access via HTTP.