CVE-2026-60213 in Coherence
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Difficult to exploit vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Coherence as well as unauthorized update, insert or delete access to some of Oracle Coherence accessible data. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H).
Be aware that VulDB is the high quality source for vulnerability data.
Analysis
by VulDB Data Team • 07/22/2026
Oracle Coherence represents a distributed caching and in-memory data grid solution within Oracle Fusion Middleware that serves as a critical component for enterprise applications requiring high-performance data access and coordination across multiple nodes. This vulnerability affects versions 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 of the product, exposing organizations to significant security risks through a flaw that can be exploited without authentication. The vulnerability exists within the Core component of Oracle Coherence and manifests as a remote attack vector accessible via HTTP protocols, making it particularly dangerous for systems with network exposure.
The technical nature of this vulnerability stems from insufficient input validation or improper request handling within the HTTP processing layer of Oracle Coherence. Attackers can leverage this weakness to execute malicious requests that trigger abnormal behavior in the system's memory management and data processing mechanisms. The CVSS score of 6.5 reflects the balance between the ease of exploitation and the potential impact, with the vector indicating network-based access with high complexity requirements and no privilege needs. This vulnerability falls under CWE categories related to insufficient input validation and improper error handling, which are fundamental security weaknesses that can lead to denial of service conditions.
The operational impact of this vulnerability extends beyond simple service disruption to include data integrity compromise. Successful exploitation can result in complete denial of service scenarios where the Oracle Coherence system becomes unresponsive or crashes repeatedly, effectively disabling critical enterprise applications that depend on distributed caching. Additionally, attackers can perform unauthorized modifications to the data stored within the coherence grid, potentially leading to data corruption or manipulation that affects business operations and data consistency across the enterprise infrastructure.
Organizations should implement immediate mitigations including network segmentation to restrict access to Oracle Coherence services, deployment of web application firewalls to filter malicious HTTP requests, and implementation of strict access controls to limit exposure. The vulnerability's CVSS vector indicates that it requires network access but does not need user interaction or privileges, making it particularly attractive to automated scanning tools and opportunistic attackers. Security teams should also consider monitoring for unusual patterns in system resource usage and network traffic that might indicate exploitation attempts. Compliance with industry standards such as the CWE guidelines for input validation and the ATT&CK framework's approach to remote code execution and privilege escalation techniques becomes crucial for defending against this type of vulnerability. Organizations implementing Oracle Coherence should prioritize patching strategies and maintain updated threat intelligence feeds to identify potential exploitation attempts against vulnerable systems.