CVE-2026-60233: Medium severity Oracle Oracle Coherence vulnerability
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Easily exploitable vulnerability allows low privileged attacker with network access via TCP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of Oracle Coherence. CVSS 3.1 Base Score 4.3 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L).
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs network access to the Oracle Coherence service over TCP and low-privileged credentials. No user interaction is required.
What is the expected impact of successful exploitation?
Successful exploitation can allow an attacker to cause a partial denial of service affecting Oracle Coherence. The stated impact is limited to availability; no confidentiality or integrity impact is identified.
Which version is identified as affected?
The affected supported version identified is Oracle Coherence 15.1.1.0.0.