CVE-2020-2555

CVE-2020-2555 (WebLogic/Coherence) : A deserialization vulnerability in Oracle Coherence (Fusion Middleware) enables unauthenticated remote code execution via the T3 protocol. Affected versions include Coherence 3.7.1.x, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0. The flaw originates from ReflectionExtra...

CVE-2020-36518

CVE-2020-36518 affects jackson-databind prior to 2.13.0, enabling a Java StackOverflow and DoS via excessive nesting depth. In affected advisories, remediation is to upgrade jackson-databind to 2.13.0+ (examples show 2.13.x or newer such as 2.13.4.2 in Crowd/CWD references). Practical impact is d...

CVE-2020-25649

The CVE-2020-25649 entry concerns a flaw in FasterXML Jackson Databind where entity expansion was not properly secured, enabling XML External Entity (XXE) attacks. This is a data-integrity risk. Connected advisories consistently associate the issue with Jackson Databind and XXE, and several sourc...

CVE-2021-21409

The CVE concerns Netty’s HTTP/2 codec (io.netty:netty-codec-http2) where, before version 4.1.61.Final, a Content-Length check can be bypassed when a single Http2HeaderFrame with endStream set to true is used. This enables HTTP request smuggling if the request is proxied and translated to HTTP/1.1...

CVE-2021-37136

CVE-2021-37136 : The Bzip2 decompression decoder can set no limit on the decompressed output size, affecting all Bzip2Decoder users. This under- or over-allocates memory during decompression and can trigger an OutOfMemoryError, enabling DoS. Connected IBM/ASTRA entries reiterate the same descript...

CVE-2021-43797

CVE-2021-43797 : Netty prior to 4.1.71.Final fails to validate control chars at the start/end of header names, allowing HTTP request smuggling via crafted transfer-encoding/headers. This can enable the proxy to sanitize header names and forward malformed requests to remote systems that may not re...

CVE-2026-60241

CVE-2026-60241 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affected versions are 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP to compromise Oracle Coherence, potentially taking over the component. CVSS v...

CVE-2020-2915

CVE-2020-2915 affects Oracle Coherence within Oracle Fusion Middleware (Caching, CacheStore, Invocation). Affected versions are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0. The issue allows an unauthenticated attacker with network access via IIOP/T3 to compromise Oracle Coherence, potentially tak...

CVE-2022-21420

CVE-2022-21420 affects Oracle Coherence (Oracle Fusion Middleware, Core) with affected versions 12.2.1.3.0, 12.2.1.4.0, and 14.1.1.0.0. The vulnerability allows an unauthenticated remote attacker who can reach the service via T3 to compromise Coherence and may lead to takeover. The CVSS3.1 vector...

CVE-2020-14756

A critical insecure deserialization vulnerability exists in the Oracle Coherence product of Oracle Fusion Middleware (Core Components). The flaw stems from a lack of deserialization filtering when Coherence ExternalizableLite classes are processed, specifically affecting the coherence.jar library...

CVE-2022-21570

CVE-2022-21570 affects Oracle Coherence (Oracle Fusion Middleware, Core) with vulnerable versions 3.7.1.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows unauthenticated network access via T3/IIOP to the Coherence service and can lead to a hang or frequent crash (complete DoS). T...

CVE-2026-60285

CVE-2026-60285 affects the Oracle Coherence (Core) component in Oracle Fusion Middleware . Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0 . The vulnerability allows an unauthenticated attacker with network access via TCP to compromise Oracle Coherence, potentially leading to ta...

CVE-2021-2277

CVE-2021-2277 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affected versions are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. It allows an unauthenticated attacker with network access via HTTP to access data, per CVSS 3.1 Base Score 7.5 (Confidentiality). The vulner...

CVE-2020-14642

CVE-2020-14642 affects Oracle Coherence (Fusion Middleware) CacheStore. Affected versions: 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The vulnerability permits an unauthenticated remote attacker over HTTP to cause a hang or complete DoS in Oracle Coherence. CVSS 3.1 base score 7....

CVE-2021-2344

CVE-2021-2344 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affected versions: 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via T3/IIOP to cause a hang or frequently repeatable crash (complete DOS)...

CVE-2021-2428

CVE-2021-2428 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected are 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via T3/IIOP to compromise Oracle Coherence, with potential takeover. CVSSv3.1 bas...

CVE-2021-2371

CVE-2021-2371 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions: 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0. An unauthenticated attacker with network access via T3/IIOP can cause the Coherence service to hang or crash (complete DoS). CVSS v3.1 base sc...

CVE-2026-35308

Technical details are not publicly available in the provided documents. Monitor for updates from Oracle security alerts and CVE records to learn affected products, impact, and remediation.

CVE-2026-60217

The CVE-2026-60217 entry concerns Oracle Coherence (Core) within Oracle Fusion Middleware. Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. The vulnerability is exploitable by an unauthenticated attacker who can reach the service over TCP on the network, with pot...

CVE-2026-35307

Technical details for CVE-2026-35307 are not publicly available in the provided documents. Monitor for updates from Oracle and CVE records to obtain affected products, impact, and remediation information.

CVE-2026-60251

CVE-2026-60251 affects Oracle Coherence (component: Core) within Oracle Fusion Middleware. Affects supported versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated attacker with TCP network access can compromise Oracle Coherence, with possible takeover and impacts to conf...

CVE-2020-2949

CVE-2020-2949 describes a vulnerability in Oracle Coherence (Oracle Fusion Middleware) affecting components Caching, CacheStore, Invocation. Affected versions are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. The issue allows an unauthenticated, network-reachable attacker (via HTTP) to read a s...

CVE-2026-60247

CVE-2026-60247 affects Oracle Coherence (part of Oracle Fusion Middleware) with vulnerable versions 12.2.1.4.0 and 14.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise Oracle Coherence and potentially take over the service. The CVSS 3.1 base...

CVE-2026-60280

CVE-2026-60280 affects Oracle Coherence (core) within Oracle Fusion Middleware. Affected versions: 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via HTTP/2 to compromise Oracle Coherence, potentially taking over the service. CVSS ...

CVE-2026-35309

Technical details about CVE-2026-35309 are not publicly available in the provided documents. Monitor for official disclosures and updates.

CVE-2026-60272

CVE-2026-60272 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access over HTTP to compromise Oracle Coherence and potentially take over the compon...

CVE-2026-35304

Technical details about CVE-2026-35304 are not publicly available in the provided documents. Monitor for updates from Oracle security alerts and CVE records.

CVE-2026-35305

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2026-60270

CVE-2026-60270 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0. The vulnerability allows a high-privilege attacker with network access via HTTP to potentially access or modify Oracle Coherence data. CVSS 3.1 base score...

CVE-2026-60219

CVE-2026-60219 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affected versions are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. The vulnerability allows unauthenticated, network-accessible (TCP) exploitation leading to takeover of Oracle Coherence; CVSS v3.1 base score 9.8 (CRITICAL). Re...

CVE-2026-60253

CVE-2026-60253 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Impacted versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, 15.1.1.0.0. An unauthenticated, network-accessible attacker via TCP can take over Oracle Coherence. CVSS v3.1 base score 9.8 (C/H/I/A). Exploitation details are n...

CVE-2026-35310

Technical details for CVE-2026-35310 are not provided in the supplied documents. No affected products, components, root cause, impacts, or remediation information are available here. Monitor for official updates from CVE/CVE List sources.

CVE-2026-60197

Oracle CVE-2026-60197 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. The issue is described as easily exploitable: an unauthenticated attacker can gain network access via TCP to compromise Coherence, potent...

CVE-2026-60300

CVE-2026-60300 affects the Oracle Coherence Core in Oracle Fusion Middleware. Vulnerable versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability is exploitable over a network (TCP) with no authentication and can lead to takeover of Oracle Coherence. CVSS v3.1 base score 9....

CVE-2026-60225

CVE-2026-60225 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated, network‑accessible attacker via HTTP to compromise Oracle Coherence, with potential takeover of the servi...

CVE-2026-60257

The CVE-2026-60257 entry concerns Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions are 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability is exploitable over TCP with no authentication, enabling takeover of Oracle Coherence as described in the sources. The CVSS v3...

CVE-2026-60210

CVE-2026-60210 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affects 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated attacker with network access via TCP can compromise Oracle Coherence, with CVSS 3.1 base score 9.8 (C/H/I/A). No exploit details are provided in the c...

CVE-2026-60254

CVE-2026-60254 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via TCP to take over Oracle Coherence. CVSS 3.1 base score is 9.8 (C/H/I/A). ...

CVE-2026-60211

CVE-2026-60211 affects the Oracle Coherence product (Core component) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with access to the physical communication segment attached to the ha...

CVE-2026-60216

CVE-2026-60216 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. An unauthenticated attacker with network access via TCP can potentially compromise Oracle Coherence, leading to takeover. CVSS v3.1 base score: 9....

CVE-2026-60244

The CVE-2026-60244 entry concerns Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.1.0.0. The vulnerability enables unauthenticated, network-accessible attackers via HTTP to compromise Oracle Coherence, potentially leading to takeover of the Coher...

CVE-2026-83410

A vulnerability in Oracle Coherence (component: Core ), part of Oracle Fusion Middleware, affects versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 . A low-privileged attacker with network access via multiple protocols can exploit this vulnerability with low complexity and no user inter...

CVE-2026-60228

This CVE affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability is exploitable with network access via TCP by an unauthenticated attacker and can lead to takeover of Oracle Coherence, w...

CVE-2026-60236

CVE-2026-60236 affects Oracle Coherence (Oracle Fusion Middleware, Core) with vulnerable versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. Described as easily exploitable: unauthenticated attacker with network access via TCP can compromise and takeover Oracle Coherence. CVSS v3.1 base ...

CVE-2026-60246

CVE-2026-60246 affects Oracle Coherence within Oracle Fusion Middleware. Vulnerable versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The issue allows an unauthenticated attacker with network access via TCP to compromise Oracle Coherence, with potential takeover and full impact on con...

CVE-2026-60250

CVE-2026-60250 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability allows an unauthenticated attacker with network access via TCP to compromise Oracle Coherence, with takeover as the stated im...

CVE-2026-60252

The CVE-2026-60252 entry concerns Oracle Coherence (Core) in Oracle Fusion Middleware. Affected supported versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability is exploitable over TCP with no authentication and remote network access, leading to a hang or frequent, rep...

CVE-2026-60278

A CVE entry for CVE-2026-60278 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affected versions are 12.2.1.4.0 and 14.1.1.0.0. The vulnerability is exploitable with network access via HTTP by an unauthenticated attacker, potentially leading to takeover of Oracle Coherence. The CVSS ...

CVE-2026-60296

CVE-2026-60296 affects Oracle Coherence (Core) in Oracle Fusion Middleware. Affected versions: 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability enables an unauthenticated attacker with TCP network access to compromise Oracle Coherence, potentially taking over the service. CVS...

CVE-2026-60305

CVE-2026-60305 affects Oracle Coherence (Core) within Oracle Fusion Middleware. Affected versions are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0. The vulnerability is exploitable over TCP with network access by a low-privilege attacker, leading to unauthorized create/delete/modify access ...