CVE-2026-60283: Infoleak
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.1 Base Score 5.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle Coherence (Oracle Fusion Middleware) - Coreto a version that resolves this vulnerability.Fixed in 12.2.1.4.0 - Upgrade
Upgrade
Oracle Coherence (Oracle Fusion Middleware) - Coreto a version that resolves this vulnerability.Fixed in 14.1.1.0.0 - Upgrade
Upgrade
Oracle Coherence (Oracle Fusion Middleware) - Coreto a version that resolves this vulnerability.Fixed in 14.1.2.0.0 - Upgrade
Upgrade
Oracle Coherence (Oracle Fusion Middleware) - Coreto a version that resolves this vulnerability.Fixed in 15.1.1.0.0
Event History
Frequently Asked Questions
What is the severity of CVE-2026-60283?
CVE-2026-60283 has a medium severity rating of 5.3.
How do I fix CVE-2026-60283?
To fix CVE-2026-60283, update to a supported version of Oracle Coherence that is not affected by this vulnerability.
What products are affected by CVE-2026-60283?
CVE-2026-60283 affects Oracle Coherence versions 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0.
What type of attack vector is associated with CVE-2026-60283?
CVE-2026-60283 can be exploited by an unauthenticated attacker with network access via HTTP.
What is the impact of CVE-2026-60283?
CVE-2026-60283 is classified as an info leak, allowing unauthorized access to sensitive data.