CVE-2026-60234 in Coherence
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 07/22/2026
Oracle Coherence represents a distributed caching and processing platform within Oracle Fusion Middleware that facilitates high-performance data management across enterprise environments. This vulnerability exists within the core component of the software and affects multiple version lines including 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, indicating a widespread impact across the product lifecycle. The flaw manifests as an authentication bypass vulnerability that allows attackers to access the system without providing valid credentials, presenting a critical security weakness in the platform's access control mechanisms.
The technical exploitation of this vulnerability occurs through TCP network connections, making it particularly dangerous as it requires no prior authentication credentials or privileged access. Attackers can leverage this weakness to establish unauthorized connections and potentially gain complete administrative control over the Oracle Coherence instance. The CVSS 3.1 score of 9.8 reflects the severity of impact across all three core security principles: confidentiality, integrity, and availability. This high scoring vulnerability means that successful exploitation could result in full system compromise with complete data access, modification capabilities, and potential service disruption.
The operational implications of this vulnerability extend beyond simple unauthorized access to encompass complete system takeover scenarios. Organizations utilizing affected Oracle Coherence versions face significant risk of data breaches, service interruptions, and potential regulatory compliance violations. The vulnerability's ease of exploitation means that automated attack tools could readily target exposed systems, creating a heightened threat landscape for enterprises relying on this middleware solution. Security professionals must consider the distributed nature of Coherence deployments where multiple nodes may be vulnerable simultaneously, amplifying the potential impact across entire enterprise networks.
Mitigation strategies should prioritize immediate patching of affected versions through Oracle's security updates and patches. Organizations must also implement network segmentation to limit exposure of Coherence instances to untrusted networks, while monitoring for unauthorized access attempts and implementing robust firewall rules to restrict TCP port access. The vulnerability aligns with CWE-287 which addresses improper authentication issues, and corresponds to ATT&CK technique T1078 for valid accounts and privilege escalation. Additional protective measures include disabling unnecessary network services, implementing intrusion detection systems, and conducting comprehensive security assessments of all Coherence deployments to identify potential exposure points.
This vulnerability demonstrates the critical importance of maintaining up-to-date security patches in enterprise middleware platforms where distributed systems can create complex attack surfaces. Organizations should review their overall security posture for Oracle Fusion Middleware components and consider implementing additional security controls such as network monitoring, access logging, and regular vulnerability assessments to prevent exploitation of similar weaknesses across their infrastructure.