CVE-2026-60288 in Coherence
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
If you want to get best quality of vulnerability data, you may have to visit VulDB.
Analysis
by VulDB Data Team • 07/22/2026
The vulnerability under examination affects Oracle Coherence, a distributed caching and processing platform within Oracle Fusion Middleware that serves as a critical component for enterprise-scale applications requiring high-performance data management and processing capabilities. This vulnerability exists in multiple supported versions including 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, indicating a widespread impact across the product lifecycle. The flaw represents a significant security weakness that can be exploited by unauthenticated attackers who gain network access through TCP connections, making it particularly dangerous for systems exposed to external networks or poorly segmented environments.
The technical nature of this vulnerability stems from inadequate authentication mechanisms within the Oracle Coherence service, allowing unauthorized entities to establish connections and potentially execute malicious commands against the affected system. The CVSS 3.1 score of 9.8 reflects the severity of impact across all three core security principles: confidentiality, integrity, and availability. This high-severity rating indicates that successful exploitation can result in complete system compromise, where attackers gain full control over the Oracle Coherence instance. The attack vector requires only network connectivity via TCP protocol, making it easily exploitable without requiring specialized tools or privileged access.
The operational impact of this vulnerability extends beyond simple data theft or service disruption, as it enables full system takeover capabilities that can lead to extensive damage within enterprise environments. Organizations relying on Oracle Coherence for mission-critical applications face potential exposure to data breaches, service outages, and unauthorized modifications to distributed data caches. The compromise of such foundational components can cascade through entire application architectures, affecting downstream systems that depend on coherent data synchronization and processing capabilities. This vulnerability particularly affects organizations with insufficient network segmentation or inadequate perimeter security controls.
Mitigation strategies should prioritize immediate patching of affected versions to address the authentication bypass flaw. Organizations must implement robust network segmentation to limit direct access to Oracle Coherence services, utilizing firewalls and access control lists to restrict TCP connections to authorized administrative networks only. Network monitoring should be enhanced to detect unusual connection patterns or unauthorized access attempts targeting the affected service ports. The vulnerability aligns with CWE-287 which addresses authentication failures in software systems, and its exploitation pattern corresponds to ATT&CK technique T1190 for exploitation of remote services. Security teams should also consider implementing additional monitoring controls and conducting comprehensive vulnerability assessments to identify potential unauthorized access or compromise within their Oracle Coherence deployments.