CVE-2026-60236 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly state patch availability or remediation status for Oracle Coherence in the provided content.
CVE-2026-60235 is a high-severity vulnerability in Oracle Coherence 15.1.1.0.0 that allows an unauthenticated attacker with network access via TCP to cause denial of service by hanging or crashing the service. It also permits unauthorized read, update, insert, or delete access to some data accessible through Oracle Coherence. The vulnerability affects confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory in July 2026 addressing multiple vulnerabilities, including this one, but no explicit patch information for this specific CVE is provided in the advisory content.
CVE-2026-60234 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise the product, potentially leading to complete takeover. The CVSS 3.1 base score is 9.8, indicating severe confidentiality, integrity, and availability impacts. Oracle has published a Critical Patch Update advisory addressing multiple vulnerabilities, including this one, and strongly recommends applying patches promptly. No specific patch links for this vulnerability were provided in the input data, so users should consult the Oracle advisory for patch availability and installation instructions.
CVE-2026-60233 is a vulnerability in Oracle Coherence 15.1.1.0.0 that allows a low privileged attacker with network access via TCP to cause a partial denial of service. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.3, indicating medium severity. No official patch or remediation level is explicitly stated in the vendor advisory, but Oracle strongly recommends applying Critical Patch Updates promptly. There are no known exploits in the wild at this time.
CVE-2026-60232 is a critical vulnerability in Oracle Coherence, a component of Oracle Fusion Middleware. It affects versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially leading to full takeover. The CVSS 3.1 base score is 9.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but has not explicitly confirmed patch availability or remediation status for Oracle Coherence in the advisory content provided. No known exploits in the wild have been reported yet.
CVE-2026-60231 is a medium severity vulnerability in Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows a low privileged attacker with network access via HTTP to gain unauthorized read and write access to some Oracle Coherence accessible data. The vulnerability affects confidentiality and integrity but does not impact availability. No official patch or remediation level has been explicitly stated in the vendor advisory as of the publication date.
CVE-2026-60230 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability or remediation status for Oracle Coherence in the advisory content provided.
CVE-2026-60229 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially resulting in complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability.
CVE-2026-60227 is a critical vulnerability in Oracle Coherence, a component of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to compromise the product, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability for these versions in the provided data.
CVE-2026-60226 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise the product, potentially taking over Oracle Coherence. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory, which contains numerous patches across multiple products. However, the vendor advisory does not explicitly confirm the availability of a specific patch for this vulnerability at this time. Customers are strongly advised to apply Oracle Critical Patch Updates promptly to mitigate risks associated with such vulnerabilities.
CVE-2026-60225 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to fully compromise Oracle Coherence, potentially resulting in complete takeover. The CVSS 3.1 base score is 9.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory, which contains numerous security patches across Oracle products. However, the vendor advisory does not explicitly confirm the availability of a specific patch for this vulnerability at this time.
CVE-2026-60224 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability or remediation status for Oracle Coherence in the advisory content provided.
CVE-2026-60223 is a high-severity vulnerability in Oracle Coherence that allows an unauthenticated attacker with network access via TCP to cause a denial of service by hanging or crashing the service. The affected versions include 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability impacts availability but does not affect confidentiality or integrity. Oracle has published a Critical Patch Update advisory including this vulnerability but does not explicitly confirm patch availability for Oracle Coherence in the provided advisory content.
CVE-2026-60222 is a high-severity vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via T3 or IIOP protocols to potentially take over Oracle Coherence. The CVSS 3.1 base score is 8.1, indicating high impact on confidentiality, integrity, and availability. No official patch or remediation level is currently confirmed by Oracle. Oracle strongly recommends applying security patches promptly, but patch status for this specific vulnerability is not explicitly stated in the advisory.
CVE-2026-60221 is a critical vulnerability in Oracle Coherence, a component of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially leading to complete takeover. The CVSS 3.1 base score is 9.8, indicating severe confidentiality, integrity, and availability impacts. Oracle has published a Critical Patch Update advisory that includes patches for this and many other vulnerabilities. Users are strongly advised to apply the relevant security patches promptly. No known exploits in the wild have been reported at this time.
CVE-2026-60220 is a critical vulnerability in Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows an unauthenticated attacker with network access via TCP to compromise the product, requiring human interaction from a third party. Exploitation can lead to unauthorized creation, deletion, or modification of critical data within Oracle Coherence and may impact additional products. The vulnerability has a CVSS 3.1 base score of 9.3, indicating high confidentiality and integrity impact. Oracle has published a Critical Patch Update advisory addressing this and other vulnerabilities, recommending timely patching. Patch availability specific to this vulnerability is not explicitly confirmed in the advisory, so users should consult the vendor advisory for current remediation guidance.
CVE-2026-60219 is a critical vulnerability in Oracle Coherence versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows an unauthenticated attacker with network access via TCP to compromise the product, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability for these versions in the provided content. No known exploits in the wild have been reported yet.
CVE-2026-60218 is a high-severity vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows a low privileged attacker with network access via TCP to compromise the product, potentially leading to full takeover. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory but has not explicitly stated patch availability or remediation details for Oracle Coherence in the provided advisory content.
CVE-2026-60216 is a critical vulnerability in Oracle Coherence, a component of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via TCP to compromise the product, potentially leading to complete takeover. The CVSS 3.1 base score is 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory that includes patches for this and many other vulnerabilities. Users are strongly advised to apply the security patches promptly to mitigate risk.
CVE-2026-60215 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability or remediation status for Oracle Coherence in the advisory content provided.