CVE-2026-60302 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability.
CVE-2026-60301 is a high-severity vulnerability in Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows an unauthenticated attacker with network access via TCP to cause a denial of service by hanging or crashing the product. The vulnerability impacts availability but does not affect confidentiality or integrity. Oracle has listed this vulnerability in its July 2026 Critical Patch Update advisory but has not explicitly confirmed patch availability for Oracle Coherence in the advisory content provided. No known exploits in the wild have been reported.
CVE-2026-60300 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially leading to complete takeover. The CVSS 3.1 base score is 9.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability for these versions. No known exploits in the wild have been reported yet.
CVE-2026-60299 is a critical vulnerability in Oracle Coherence versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows an unauthenticated attacker with network access via TCP to compromise the product, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability for these versions in the provided content.
CVE-2026-60298 is a critical vulnerability in Oracle Coherence versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows an unauthenticated attacker with network access via TCP to compromise the product, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has acknowledged the issue in its July 2026 Critical Patch Update advisory but has not explicitly confirmed patch availability for this specific vulnerability. Customers are strongly advised to apply Oracle's security patches promptly as part of the Critical Patch Update process.
CVE-2026-60297 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially resulting in complete takeover. The CVSS 3.1 base score is 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory addressing this and many other vulnerabilities. No explicit patch or fix version is stated in the advisory content provided.
CVE-2026-60296 is a critical vulnerability in Oracle Coherence, a component of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via TCP to compromise Oracle Coherence, potentially resulting in full takeover of the product. The CVSS 3.1 base score is 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory, which contains numerous security patches across Oracle products. However, the vendor advisory does not explicitly confirm the availability of a specific patch for this vulnerability at this time.
CVE-2026-60295 is a high-severity vulnerability in Oracle Coherence versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows a low privileged attacker with network access via TCP to potentially take over Oracle Coherence. The vulnerability impacts confidentiality, integrity, and availability, and may affect additional products beyond Oracle Coherence. The vulnerability is difficult to exploit and has a CVSS 3.1 base score of 8.5. Oracle has published a Critical Patch Update advisory addressing this and many other vulnerabilities, recommending timely patching. Patch availability for this specific vulnerability is not explicitly confirmed in the advisory, so users should consult the vendor advisory for current remediation guidance.
CVE-2026-60290 is a critical vulnerability in Oracle Coherence versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has acknowledged the vulnerability but has not explicitly confirmed patch availability in the provided advisory. Users are strongly encouraged to monitor Oracle's Critical Patch Update advisories for patches and apply them promptly once available.
CVE-2026-60289 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via HTTP to fully compromise the product, potentially resulting in complete takeover. The CVSS 3.1 base score is 9.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory that includes patches for this and many other vulnerabilities. Users are strongly advised to apply the relevant patches promptly to mitigate risk.
CVE-2026-60288 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially resulting in complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has released a Critical Patch Update in July 2026 addressing this and many other vulnerabilities. Users are strongly advised to apply the patches promptly to mitigate risk.
CVE-2026-60287 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially resulting in complete takeover. The CVSS 3.1 base score is 9.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability or remediation status for Oracle Coherence in the provided content.
CVE-2026-60286 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via HTTP to fully compromise Oracle Coherence, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory, recommending timely patching. No explicit patch or remediation details are provided in the advisory content excerpt, so users should consult the official Oracle advisory for patch availability and instructions.
CVE-2026-60285 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability or remediation status for this specific issue. No known exploits in the wild have been reported as of the advisory date.
CVE-2026-60284 is a high-severity vulnerability in Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or full access to all data accessible by Oracle Coherence. The attacker may also perform unauthorized update, insert, or delete operations on some data. The vulnerability has a CVSS 3.1 base score of 8.2, indicating a significant confidentiality and integrity impact. Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory but has not explicitly stated patch availability for Oracle Coherence in the provided content.
CVE-2026-60283 is a vulnerability in Oracle Coherence, part of Oracle Fusion Middleware Core component. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via HTTP to gain unauthorized read access to some Oracle Coherence data. The CVSS 3.1 base score is 5.3, indicating a medium severity impact focused on confidentiality. No official patch or remediation level is explicitly stated in the vendor advisory. Oracle strongly recommends applying security patches promptly, but the specific patch status for this vulnerability is not confirmed in the advisory.
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of Oracle Coherence accessible data as well as unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).
CVE-2026-60281 is a high-severity vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It allows an unauthenticated attacker with access to the physical communication segment of the hardware running Oracle Coherence to compromise the system. Successful exploitation can lead to unauthorized creation, deletion, or modification of critical data accessible by Oracle Coherence. The vulnerability affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The CVSS 3.1 base score is 8.1, indicating high impact on confidentiality and integrity. Oracle has published a Critical Patch Update advisory including this vulnerability but does not explicitly state patch availability or remediation level for this specific issue in the provided advisory content.
CVE-2026-60280 is a critical vulnerability in Oracle Coherence versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows an unauthenticated attacker with network access via HTTP/2 to compromise the product, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability for these versions in the provided data.
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).