CVE-2026-60227 in Coherence
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 07/22/2026
Oracle Coherence represents a distributed caching and processing platform within Oracle Fusion Middleware that facilitates high-performance data management across distributed systems. This vulnerability exists within the core component of the software and affects multiple version lines including 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, indicating a widespread issue that spans several major releases of the platform. The vulnerability manifests as an easily exploitable flaw that permits unauthorized network-based attackers to compromise the Oracle Coherence instance without requiring authentication credentials.
The technical nature of this vulnerability allows for unauthenticated remote exploitation through TCP network connections, representing a significant security weakness in the platform's access control mechanisms. Attackers can leverage this flaw to gain complete control over the affected Oracle Coherence instances, which serve as critical data processing and caching components within enterprise environments. The CVSS 3.1 scoring of 9.8 reflects the severity of impact across all three fundamental security properties defined by the framework, with high scores for confidentiality, integrity, and availability implications.
The operational impact of this vulnerability extends beyond simple data compromise, as successful exploitation can result in complete system takeover of Oracle Coherence services that may be critical to business operations. Organizations utilizing these distributed caching systems face potential data breaches, service disruption, and unauthorized modification of cached data that could affect multiple dependent applications. The vulnerability's network accessibility means that attackers do not require physical access or prior authentication credentials, making it particularly dangerous in environments where network exposure is common.
Organizations should prioritize immediate patching of affected Oracle Coherence instances to mitigate this critical vulnerability, as the CVSS score indicates a high likelihood of successful exploitation and severe consequences. The vulnerability aligns with CWE-284 access control weaknesses and maps to ATT&CK techniques involving remote code execution and privilege escalation. Security teams should implement network segmentation measures to restrict TCP access to Oracle Coherence services until patches are deployed, while also monitoring for potential exploitation attempts through network traffic analysis.
This vulnerability demonstrates the critical importance of maintaining up-to-date security patches for enterprise middleware platforms, particularly those handling sensitive data in distributed environments. The widespread affected versions suggest that organizations across multiple deployment scenarios may be impacted, requiring comprehensive vulnerability assessment and remediation efforts. Organizations should also review their access control policies and network architecture to prevent unauthorized access to critical Oracle Fusion Middleware components while implementing additional monitoring capabilities to detect potential exploitation attempts.