Coherence vulnerabilities

95 known vulnerabilities in Coherence from Oracle. 95 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60261Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with acces

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60259Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60258Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60257Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60256Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 8.2 High severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60255Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60254Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60253Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 7.5 High severity

  Oracle Coherence: Uncontrolled Resource Consumption

  CVE-2026-60252Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60251Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60250Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.0 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60249Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with access

• 9.3 Critical severity

  Oracle Coherence: Improper Privilege Management

  CVE-2026-60248Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60247Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to co

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60246Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 7.2 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60245Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60244Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to co

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60242Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to co

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60241Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60240Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.6 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60239Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with networ

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60236Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 8.6 High severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60235Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60234Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60232Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60230Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60229Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60228Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60227Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60226Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60225Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60224Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 7.5 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60223Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 8.1 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60222Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

• 9.8 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60221Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.3 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60220Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60219Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 8.8 High severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60218Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with networ

• 10.0 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60217Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60216Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo