This vulnerability in Oracle Coherence, a component of Oracle Fusion Middleware, permits an attacker with low privileges and network access over HTTP to perform unauthorized update, insert, delete, and read operations on accessible data. The CVSS 3.1 base score is 5.4, reflecting low complexity attack requirements and impacts on confidentiality and integrity. The affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vendor advisory from Oracle does not explicitly confirm the availability of a patch or remediation for this specific vulnerability but recommends applying Critical Patch Updates promptly. No known exploits in the wild have been reported.

Successful exploitation allows unauthorized read and modification (update, insert, delete) of some data accessible via Oracle Coherence, compromising confidentiality and integrity of that data. There is no impact on availability. The attacker requires network access via HTTP and low privileges.

Oracle's advisory does not explicitly confirm a patch or remediation level for this vulnerability. Customers are strongly advised to apply Oracle's Critical Patch Updates promptly as they contain cumulative security patches. Until a specific patch is confirmed, monitor Oracle's security alerts for updates. No vendor guidance indicates that no action is required or that the issue is already mitigated.