Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Metrics
Affected Vendors & Products
| Vendors | Products |
|---|---|
| Oracle |
|
Configuration 1 [-]
|
No data.
References
| Link | Providers |
|---|---|
| https://www.oracle.com/security-alerts/cpujul2026.html |
|
History
Sun, 02 Aug 2026 23:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Unauthorized Network Access Exploitation Leading to Full Compromise in Oracle Coherence |
Thu, 30 Jul 2026 18:30:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-306 | |
| Metrics |
ssvc
|
Mon, 27 Jul 2026 14:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Easily Exploitable Remote Code Execution in Oracle Coherence | |
| Weaknesses | CWE-284 |
Fri, 24 Jul 2026 01:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Easily Exploitable Remote Code Execution in Oracle Coherence | |
| Weaknesses | CWE-284 |
Tue, 21 Jul 2026 21:45:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). | |
| First Time appeared |
Oracle
Oracle coherence |
|
| CPEs | cpe:2.3:a:oracle:coherence:12.2.1.4.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:coherence:14.1.1.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:coherence:14.1.2.0.0:*:*:*:*:*:*:* cpe:2.3:a:oracle:coherence:15.1.1.0.0:*:*:*:*:*:*:* |
|
| Vendors & Products |
Oracle
Oracle coherence |
|
| References |
| |
| Metrics |
cvssV3_1
|
MITRE
Status: PUBLISHED
Assigner: oracle
Published: 2026-07-21T21:34:17.595Z
Updated: 2026-07-30T16:53:29.515Z
Reserved: 2026-07-08T15:51:40.528Z
Link: CVE-2026-60296
Vulnrichment
Updated: 2026-07-23T18:40:13.616Z
NVD
Status : Analyzed
Published: 2026-07-21T22:17:32.160
Modified: 2026-08-07T13:11:40.280
Link: CVE-2026-60296
Redhat
No data.