Coherence vulnerabilities

95 known vulnerabilities in Coherence from Oracle. 95 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Oracle Coherence: Improper Privilege Management

  CVE-2026-83415Sep 15, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with netw

• 8.1 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-83412Sep 15, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with networ

• 8.8 High severity

  Oracle Coherence: Improper Privilege Management

  CVE-2026-83411Sep 15, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via

• 8.8 High severity

  Oracle Coherence: Improper Privilege Management

  CVE-2026-83410Sep 15, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with networ

• 8.8 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60309Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with acces

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60308Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60306Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 7.1 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60305Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with networ

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60302Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 7.5 High severity

  Oracle Coherence: Uncontrolled Resource Consumption

  CVE-2026-60301Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60300Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60299Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60298Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60297Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60296Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 8.5 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60295Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access v

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60290Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60289Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60288Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60287Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60286Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60285Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 8.2 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60284Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 8.1 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60281Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with acces

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60280Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.8 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60279Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60278Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to co

• 8.1 High severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60277Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60276Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60275Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60274Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 8.1 High severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60273Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60272Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 7.8 High severity

  Oracle Coherence: Improper Privilege Management

  CVE-2026-60271Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with logon

• 9.8 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60269Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 8.8 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60268Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with networ

• 9.1 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60267Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-60264Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 7.5 High severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60263Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60262Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo