CyberSecBulletin

Oracle vulnerabilities

We track 3,014 vulnerabilities in Oracle products across 60+ products. 3,006 are rated high or critical, and 81 have been exploited in real attacks. The most recent was published on October 24, 2026.

3,014vulnerabilities
715critical
2,291high
81exploited
8.3average CVSS score

Latest Oracle vulnerabilities

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60302Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 7.5 High severity

    Oracle Coherence: Uncontrolled Resource Consumption

    CVE-2026-60301Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60300Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60299Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60298Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60297Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60296Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 8.5 High severity

    Oracle Coherence: Improper Access Control

    CVE-2026-60295Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with network access v

  • 9.8 Critical severity

    Oracle WebLogic Server: Missing Authentication for Critical Functionality

    CVE-2026-60294Oracle

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with

  • 8.6 High severity

    Oracle WebLogic Server: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2026-60293Oracle

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: WLS - Web Services). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated

  • 9.8 Critical severity

    Oracle WebLogic Server: Missing Authentication for Critical Functionality

    CVE-2026-60292Oracle

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP

  • 9.8 Critical severity

    Oracle WebLogic Server: Missing Authentication for Critical Functionality

    CVE-2026-60291Oracle

    Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60290Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60289Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60288Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60287Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60286Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60285Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 8.2 High severity

    Oracle Coherence: Improper Access Control

    CVE-2026-60284Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 8.1 High severity

    Oracle Coherence: Improper Access Control

    CVE-2026-60281Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with acces

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60280Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

  • 9.8 Critical severity

    Oracle Coherence: Improper Access Control

    CVE-2026-60279Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60278Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to co

  • 8.1 High severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60277Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60276Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60275Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60274Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 8.1 High severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60273Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with net

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60272Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 7.8 High severity

    Oracle Coherence: Improper Privilege Management

    CVE-2026-60271Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with logon

  • 9.8 Critical severity

    Oracle Coherence: Improper Access Control

    CVE-2026-60269Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 8.8 High severity

    Oracle Coherence: Improper Access Control

    CVE-2026-60268Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with networ

  • 9.1 Critical severity

    Oracle Coherence: Improper Access Control

    CVE-2026-60267Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 9.8 Critical severity

    Oracle Coherence: Exposure of Sensitive Information to an Unauthorized Actor

    CVE-2026-60264Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

  • 7.5 High severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60263Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60262Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 8.8 High severity

    Oracle Coherence: Improper Access Control

    CVE-2026-60261Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with acces

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60259Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60258Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with netwo

  • 9.8 Critical severity

    Oracle Coherence: Missing Authentication for Critical Functionality

    CVE-2026-60257Oracle

    Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access vi