CVE-2026-60289
Summary
by MITRE • 07/21/2026
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.
Analysis
by VulDB Data Team • 07/21/2026
Oracle Coherence represents a distributed caching and processing platform within Oracle Fusion Middleware that enables high-performance data management across distributed systems. This vulnerability exists within the core component of the software and affects multiple versions including 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, indicating a widespread impact across the product lifecycle. The vulnerability is classified as easily exploitable with a CVSS base score of 9.8, representing a critical threat level that combines high impacts to confidentiality, integrity, and availability. The attack vector requires only network access via HTTP protocol, eliminating the need for authentication credentials or specialized privileges.
The technical flaw stems from insufficient input validation and access control mechanisms within the HTTP request handling component of Oracle Coherence. An unauthenticated attacker can leverage this weakness to execute arbitrary code or commands on the affected system through carefully crafted HTTP requests. This vulnerability allows for complete system compromise, enabling attackers to gain full control over the Oracle Coherence instance and potentially escalate privileges to access underlying network infrastructure. The lack of authentication requirements and minimal access control measures means that any network-connected attacker can exploit this weakness without prior authorization or system knowledge.
The operational impact of this vulnerability is severe and multifaceted across enterprise environments that utilize Oracle Coherence for critical data processing and caching functions. Successful exploitation can result in complete data breaches where sensitive information becomes accessible to unauthorized parties, while the integrity of distributed applications may be compromised through malicious modifications. The availability impact threatens business continuity by potentially rendering distributed systems unusable or causing denial of service conditions that affect multiple dependent applications. Organizations using Oracle Coherence for mission-critical operations face significant risk of operational disruption and potential financial losses from data compromise.
Organizations should implement immediate mitigations including network segmentation to restrict access to Oracle Coherence instances, deployment of web application firewalls to filter suspicious HTTP requests, and mandatory patching of affected versions to address the underlying vulnerability. Access control measures such as restricting HTTP port exposure to trusted networks and implementing strong authentication protocols for administrative functions can significantly reduce exploitation risk. The vulnerability aligns with CWE-284 (Improper Access Control) and relates to ATT&CK techniques involving initial access through network service exploitation and privilege escalation. Regular security monitoring and log analysis should be implemented to detect potential exploitation attempts, while comprehensive incident response procedures must be established to address successful compromise scenarios that could affect distributed enterprise architectures relying on Oracle Coherence for data management and processing functions.