CVE Vulnerability Catalog
Translated CVE descriptions from NVD NIST - in English
CISA KEV catalog updated: (v2026.08.21)
Weekly CVE digest
One email a week with newly published vulnerabilities worth knowing about. No account needed.
This digest covers new vulnerabilities in general, not your servers. If you want to know which of them actually run in your infrastructure, that is what Secvalis does: it scans your machines and reports only what concerns them.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker with network access via HTTP can easily exploit this flaw, leading to a complete takeover of Oracle Coherence.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via HTTP.
Vulnerability in Oracle Coherence (component: Core). Unauthenticated attacker via network (TCP) can take over the system.
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker via TLS to unauthorizedly create, delete, or modify critical data and gain full access to all data.
Vulnerability in Oracle Coherence (component: Core). Unauthenticated attacker via network (HTTP/2) can take over the system.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via HTTP.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
Vulnerability in Oracle Coherence (component: Core) versions 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
Vulnerability in Oracle Coherence (component: Core) versions 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. An unauthenticated attacker can remotely compromise the system via TCP.
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker with network access via TCP to take over the system.
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker with network access via TCP to take over the system.
Vulnerability in Oracle Coherence (Core component) allows a low-privileged attacker with access to the physical communication segment to take over the product. Attacks may impact additional products (scope change).
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker with logon to the infrastructure to take over the product. Attacks may impact additional products (scope change).
Vulnerability in Oracle Coherence (component: Core) versions 12.2.1.4.0 and 14.1.1.0.0. An unauthenticated attacker can remotely compromise the system via HTTP.
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker with network access via TCP to take over the system.
Vulnerability in Oracle Coherence (Core component) allows an unauthenticated attacker with network access via HTTP to take over the system.