Threats tagged 'ghsa-9m6h-985f-g599'

A vulnerability exists in Oracle Coherence 15.1.1.0.0 that allows a low privileged attacker with network access via HTTP to compromise the product. Exploitation is difficult but can lead to unauthorized access to critical or all accessible data within Oracle Coherence. The vulnerability has a CVSS 3.1 base score of 6.3, indicating a medium severity with a high confidentiality impact. Oracle has included a fix for this and many other vulnerabilities in its September 2026 Critical Security Patch Update.