CVE-2026-60275 in Coherence
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 07/22/2026
Oracle Coherence represents a distributed caching and processing platform that forms a critical component within Oracle Fusion Middleware environments, providing scalable data management and real-time processing capabilities across enterprise architectures. This vulnerability exists within the core component of Oracle Coherence and affects multiple version lines including 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, indicating a widespread impact across the product lifecycle. The flaw manifests as an easily exploitable security weakness that permits unauthenticated attackers to gain network-level access through HTTP protocols, bypassing traditional authentication mechanisms that typically protect such enterprise systems.
The technical nature of this vulnerability stems from insufficient input validation and access control measures within the HTTP handling components of Oracle Coherence, creating a pathway for malicious actors to execute arbitrary commands or manipulate system resources without requiring valid credentials. This weakness directly maps to CWE-287 Authentication Bypass and potentially CWE-79 Injection flaws that allow unauthorized access to critical system functions. The CVSS 3.1 scoring of 9.8 reflects the high severity of this vulnerability, with scores of 9.8 for confidentiality, integrity, and availability impacts indicating that successful exploitation can result in complete system compromise, data exfiltration, service disruption, and potential lateral movement within the affected network infrastructure.
The operational impact of this vulnerability extends beyond simple unauthorized access as it enables full takeover capabilities of Oracle Coherence systems, potentially allowing attackers to manipulate cached data, disrupt distributed processing operations, and gain access to sensitive enterprise information stored within the cache infrastructure. This presents a significant risk to business continuity and data security, particularly in environments where Oracle Coherence serves as a critical data layer for transactional applications and real-time analytics platforms. The unauthenticated nature of the attack means that organizations cannot rely on network segmentation or traditional perimeter defenses to prevent exploitation, as the vulnerability can be leveraged from external networks without requiring prior access credentials.
Organizations should implement immediate mitigations including network-level restrictions to limit HTTP access to Oracle Coherence instances, deployment of firewall rules to block unnecessary inbound connections, and application of vendor-provided patches as soon as they become available. The ATT&CK framework categorizes this vulnerability under T1190 Exploit Public-Facing Application and potentially T1071.004 Application Layer Protocol HTTP, emphasizing the need for network monitoring and intrusion detection systems to identify potential exploitation attempts. Additional defensive measures should include regular security assessments of Oracle Coherence configurations, implementation of least privilege access controls for management interfaces, and establishment of comprehensive incident response procedures specifically addressing distributed caching system compromises. The vulnerability represents a critical threat level requiring immediate attention from security teams and system administrators to prevent potential data breaches and operational disruptions that could affect entire enterprise applications relying on Oracle Coherence infrastructure.