Threats affecting pkg:maven/com.oracle.coherence/coherence-core

A vulnerability in Oracle Coherence, part of Oracle Fusion Middleware Core component, affects versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. It allows a low privileged attacker with network access via HTTP to potentially take over Oracle Coherence. The vulnerability has a CVSS 3.1 base score of 8.8, indicating high severity with impacts on confidentiality, integrity, and availability. Oracle has released security patches addressing this vulnerability as part of its September 2026 Critical Security Patch Update.