9.8
Critique
CVE-2026-60280 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Description
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP/2 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Oracle Coherence | 15.1.1.0.0 | Pas de correctif indiqué |
| Oracle Coherence 14.1 | 14.1.1.0.0 → 14.1.2.0.0 | Pas de correctif indiqué |
Autres CVE de Oracle Coherence
Les 113 CVE de Oracle Coherence →
CVE-2026-83416
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
4.3
Moyenne
CVE-2026-83415
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
7.5
Élevée
CVE-2026-83414
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
2.5
Faible
CVE-2026-83413
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
1.9
Faible