CVE-2026-60258 in Coherence
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 07/22/2026
Oracle Coherence represents a distributed caching and processing platform that forms a critical component within Oracle Fusion Middleware ecosystems, providing high-performance data management capabilities across distributed environments. This vulnerability resides within the core component of the Oracle Coherence product and affects multiple version lines including 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, indicating a widespread impact across the product lifecycle. The flaw manifests as an easily exploitable vulnerability that requires minimal attacker prerequisites, specifically only network access via TCP protocol without any authentication requirements.
The technical nature of this vulnerability stems from inadequate security controls within the Oracle Coherence communication protocols, allowing unauthorized remote exploitation through unauthenticated network connections. This weakness creates a pathway for attackers to gain complete control over affected Oracle Coherence instances, effectively enabling them to compromise the entire distributed caching infrastructure. The CVSS 3.1 scoring of 9.8 reflects the severity of impact across all three fundamental security principles: confidentiality, integrity, and availability, with high scores in each category indicating substantial damage potential.
From an operational perspective, successful exploitation can lead to complete system takeover where attackers gain full administrative control over Oracle Coherence services, potentially enabling them to access sensitive cached data, modify application behavior, or disrupt service availability. The vulnerability's network accessibility means that attackers can potentially exploit it from anywhere on the internet without requiring prior authentication credentials or insider knowledge of the system. This characteristic significantly increases the attack surface and threat exposure for organizations running affected Oracle Coherence versions.
Organizations should immediately implement mitigations including network segmentation to restrict access to Oracle Coherence ports, deployment of firewalls to limit TCP access, and application of Oracle's security patches released through their regular update cycles. The vulnerability aligns with CWE-284 (Improper Access Control) and represents a critical threat vector that can enable lateral movement within enterprise networks where Oracle Coherence systems are deployed. This weakness also maps to ATT&CK technique T1190 (Exploit Public-Facing Application) and could facilitate subsequent attacks through privilege escalation or data exfiltration activities.
The impact extends beyond immediate system compromise as Oracle Coherence often serves as a foundational component for enterprise applications, making this vulnerability particularly dangerous from a business continuity perspective. Organizations should conduct comprehensive risk assessments to identify all instances of affected Oracle Coherence versions within their infrastructure and implement immediate security controls until proper patches are applied. The vulnerability demonstrates the critical importance of maintaining up-to-date security configurations and implementing defense-in-depth strategies to protect mission-critical distributed computing platforms.