CoreCVE
Back

CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)

Published Jul 21, 2026

Description

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (1)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner oracle
Published Jul 21, 2026
Updated Jul 23, 2026
Reserved Jul 8, 2026
Link CVE-2026-60232
CISA Vulnrichment
Updated Jul 23, 2026
NVD
Status Analyzed
Modified Jul 27, 2026
Link CVE-2026-60232
Red Hat
Severity n/a
Public date n/a
Links CVE-2026-60232