Oracle Coherence vulnerabilities

94 known vulnerabilities in Oracle Coherence from Oracle. 94 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60261Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with acces

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60259Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60258Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60257Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60256Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 8.2 High severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60255Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60254Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60253Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 7.5 High severity

  Oracle Coherence: Uncontrolled Resource Consumption

  CVE-2026-60252Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60251Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60250Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.0 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60249Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with access

• 9.3 Critical severity

  Oracle Coherence: Improper Privilege Management

  CVE-2026-60248Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with logon

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60247Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to co

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60246Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 7.2 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60245Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60244Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to co

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60242Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to co

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60241Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60240Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.6 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60239Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with networ

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60236Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 8.6 High severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60235Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60234Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60232Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60230Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60229Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60228Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60227Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60226Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60225Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60224Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 7.5 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60223Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 8.1 High severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60222Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

• 9.8 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60221Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.3 Critical severity

  Oracle Coherence: Improper Access Control

  CVE-2026-60220Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60219Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

• 8.8 High severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60218Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with networ

• 10.0 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60217Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

• 9.8 Critical severity

  Oracle Coherence: Missing Authentication for Critical Functionality

  CVE-2026-60216Jul 21, 2026Oracle

  Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo