CoreCVE
Back

CRITICAL

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)

Published Jul 21, 2026

Description

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

References (2)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner oracle
Published Jul 21, 2026
Updated Jul 23, 2026
Reserved Jul 8, 2026
Link CVE-2026-60244

CISA Vulnrichment

Updated Jul 23, 2026

NVD

Status Analyzed
Modified Jul 24, 2026
Link CVE-2026-60244

Red Hat

No data

ENISA EUVD

Assigner oracle
Published Jul 21, 2026
Updated Jul 23, 2026
Link EUVD-2026-46659

GitHub

No data