CVE-2026-60301 in Coherence
Summary
by MITRE • 07/22/2026
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Coherence. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 07/22/2026
This vulnerability resides within Oracle Coherence, a distributed caching and processing platform that forms part of Oracle Fusion Middleware. The affected versions span across multiple release lines including 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0, indicating a widespread impact across the product's lifecycle. The vulnerability is classified as easily exploitable, meaning that attackers with minimal technical expertise can leverage it without requiring authentication or specialized privileges. This characteristic significantly increases the attack surface and potential for widespread compromise.
The technical flaw manifests as a security weakness in the Core component of Oracle Coherence that operates at the TCP network level. Attackers with network access can exploit this vulnerability without any authentication requirements, making it particularly dangerous in environments where network exposure is common. The vulnerability's classification under CWE 1035 (CWE Top 25) and its alignment with ATT&CK technique T1190 (Exploit Public-Facing Application) demonstrates how this weakness enables attackers to target exposed services directly. The attack vector specifically involves TCP connections, suggesting that the vulnerability may be present in the protocol handling or connection management mechanisms within the Coherence service.
The operational impact of successfully exploiting this vulnerability is severe and directly targets system availability through a complete denial of service condition. An attacker can cause either a hang or frequently repeatable crashes that result in a total system outage, effectively rendering the Oracle Coherence service unavailable to legitimate users and applications. This type of attack aligns with CVSS 3.1 scoring that emphasizes high availability impact with a base score of 7.5, indicating a serious threat level. The vulnerability can be exploited by unauthenticated attackers who only need network connectivity, making it particularly dangerous in public-facing environments or when the service is exposed to untrusted networks.
Organizations should implement immediate mitigations including network segmentation to restrict access to Oracle Coherence services, deployment of firewalls and access control lists to limit TCP port exposure, and application of Oracle's official security patches as soon as they become available. The vulnerability's characteristics suggest that defense in depth strategies are crucial, particularly implementing monitoring solutions that can detect unusual connection patterns or service disruptions that might indicate exploitation attempts. Additionally, organizations should consider disabling unnecessary TCP services and ensuring that Oracle Coherence instances are not exposed to untrusted networks without proper security controls in place, as the lack of authentication requirements makes this vulnerability particularly attractive to automated attack tools and threat actors seeking to disrupt business operations through availability attacks.