Oracle Coherence vulnerabilities

94 known vulnerabilities in Oracle Coherence from Oracle. 94 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  Oracle Coherence: Improper Privilege Management

  CVE-2026-83415Sep 15, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with netw

• 8.1 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-83412Sep 15, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with networ

• 8.8 High severity

  Oracle Coherence: Improper Privilege Management

  CVE-2026-83411Sep 15, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via

• 8.8 High severity

  Oracle Coherence: Improper Privilege Management

  CVE-2026-83410Sep 15, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with networ

• 8.8 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60309Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with acces

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60308Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60306Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 7.1 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60305Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with networ

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60302Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 7.5 High severity

  Oracle Coherence: Uncontrolled Resource Consumption

  CVE-2026-60301Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60300Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60299Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60298Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60297Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60296Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 8.5 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60295Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access v

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60290Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60289Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60288Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60287Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60286Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60285Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 8.2 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60284Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 8.1 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60281Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with acces

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60280Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.8 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60279Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60278Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to co

• 8.1 High severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60277Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60276Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60275Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60274Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 8.1 High severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60273Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60272Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 7.8 High severity

  Oracle Coherence: Improper Privilege Management

  CVE-2026-60271Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with logon

• 9.8 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60269Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 8.8 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60268Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with networ

• 9.1 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60267Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-60264Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 7.5 High severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60263Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60262Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo