Threat Intelligence Database

CVE-2026-60309 is a high-severity vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with access to the physical communication segment attached to the hardware running Oracle Coherence to compromise the system. Successful exploitation can lead to full takeover of Oracle Coherence, impacting confidentiality, integrity, and availability. The vulnerability has a CVSS 3.1 base score of 8.8. Oracle has published a Critical Patch Update advisory referencing this and many other vulnerabilities but does not explicitly confirm patch availability or remediation status for this specific issue. No known exploits in the wild have been reported.

CVE-2026-60308 is a critical vulnerability in Oracle Coherence versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows an unauthenticated attacker with network access via HTTP to compromise the product, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory but has not explicitly stated patch availability for these versions in the provided data.

CVE-2026-60307 is a vulnerability in Oracle Coherence, a component of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows a low privileged attacker with network access via HTTP to gain unauthorized read access to some Oracle Coherence data. The vulnerability has a CVSS 3.1 base score of 4.3, indicating a medium severity level. No official patch or remediation has been explicitly stated in the vendor advisory as of the published date. Oracle recommends applying security patches promptly, but specific patch availability for this vulnerability is not confirmed in the advisory.

CVE-2026-60306 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via TCP to compromise the product, potentially resulting in full takeover. The CVSS 3.1 base score is 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but has not explicitly confirmed patch availability or remediation status for Oracle Coherence in the advisory content provided.

CVE-2026-60305 is a vulnerability in Oracle Coherence, part of Oracle Fusion Middleware Core component. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows a low privileged attacker with network access via TCP to compromise the product, potentially leading to unauthorized creation, deletion, or modification of critical data, as well as unauthorized read access to some data. The CVSS 3.1 base score is 7.1, indicating a high severity vulnerability with impacts on confidentiality and integrity but no impact on availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly state the patch status for Oracle Coherence in the provided content.

CVE-2026-60304 is a vulnerability in Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows a low privileged attacker with network access via TCP to cause a hang or repeated crash, resulting in a denial of service (DoS). The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 6.5, indicating medium severity.

CVE-2026-60302 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially leading to complete takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability.

CVE-2026-60301 is a high-severity vulnerability in Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows an unauthenticated attacker with network access via TCP to cause a denial of service by hanging or crashing the product. The vulnerability impacts availability but does not affect confidentiality or integrity. Oracle has listed this vulnerability in its July 2026 Critical Patch Update advisory but has not explicitly confirmed patch availability for Oracle Coherence in the advisory content provided. No known exploits in the wild have been reported.

CVE-2026-60300 is a critical vulnerability in Oracle Coherence, part of Oracle Fusion Middleware. It affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The flaw allows an unauthenticated attacker with network access via TCP to fully compromise Oracle Coherence, potentially leading to complete takeover. The CVSS 3.1 base score is 9.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability for these versions. No known exploits in the wild have been reported yet.

CVE-2026-60299 is a critical vulnerability in Oracle Coherence versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows an unauthenticated attacker with network access via TCP to compromise the product, potentially resulting in full takeover. The vulnerability has a CVSS 3.1 base score of 9.8, indicating high impact on confidentiality, integrity, and availability. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability for these versions in the provided content.