Oracle Coherence vulnerabilities

Vulnerability in Oracle Coherence (Core). An unauthenticated attacker via TCP can read a subset of data.

Vulnerability in Oracle Coherence (Core component) version 15.1.1.0.0 allows an unauthenticated attacker via TCP to cause DOS, modify and read some data.

Vulnerability in Oracle Coherence (component: Core) version 15.1.1.0.0. A low-privileged attacker with network access via TCP can cause a partial denial of service (partial DOS).

Vulnerability in Oracle Coherence (versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0) in the Core component. A low-privileged attacker via HTTP can gain unauthorized read and modify access to data.

Vulnerability in Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0. An unauthenticated attacker via TCP can cause a hang or repeatable crash (full DOS) of Oracle Coherence.

Vulnerability in Oracle Coherence product of Oracle Fusion Middleware (component: Core). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via T3 or IIOP to compromise Oracle Coherence, potentially leading to a takeover.

Vulnerability in Oracle Fusion Middleware's Oracle Coherence product (component: Core). Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An easily exploitable vulnerability allows a low-privileged attacker with network access via TCP to compromise Oracle Coherence.

Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 have an easily exploitable vulnerability that allows an attacker with low privileges and access to the communication segment to compromise data confidentiality and integrity. The attack may affect other products.

Vulnerability in Oracle Coherence (component: Core) allows an unauthenticated attacker to cause a hang or crash (DOS) and modify data. The attack is difficult, requires network access via HTTP.

Vulnerability in Oracle Coherence (component: Core) in Oracle Fusion Middleware. An unauthenticated attacker with access to the physical communication segment can take over Oracle Coherence.