Known vulnerabilities in Oracle Coherence

Vendor: Oracle
Software: Oracle Coherence
Software CPE: cpe:2.3:a:oracle:oracle_coherence:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 36
Public exploits: 5
Known exploited (KEV): 2

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Coherence Oracle Coherence is affected by 36 known vulnerabilities: 14 high, 19 medium, 3 low Critical High Medium Low

Vulnerabilities (36)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU149564 - Improper input validation
CVE-2026-35308		 CWE-20 High
No
No
 - 14.09.2026 SB2026091462
#VU149565 - Improper input validation
CVE-2026-35307		 CWE-20 High
No
No
 - 14.09.2026 SB2026091462
#VU149600 - Improper input validation
CVE-2026-35309		 CWE-20 High
No
No
 - 14.09.2026 SB2026091462
#VU149601 - Improper input validation
CVE-2026-35310		 CWE-20 High
No
No
 - 14.09.2026 SB2026091462
#VU149602 - Improper input validation
CVE-2026-35304		 CWE-20 High
No
No
 - 14.09.2026 SB2026091462
#VU149620 - Improper input validation
CVE-2026-35305		 CWE-20 High
No
No
 - 14.09.2026 SB2026091462
#VU149621 - Improper input validation
CVE-2026-35306		 CWE-20 High
No
No
 - 14.09.2026 SB2026091462
#VU114316 - Resource exhaustion
CVE-2025-5115		 CWE-400 Medium
No
No
 - 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 42 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 - 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763		 CWE-918 Medium
No
No
 - 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 - 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU86808 - Resource exhaustion
CVE-2024-22201		 CWE-400 Medium
No
No
 - 26.02.2024 SB2024022652
SB2024030711
SB2024030845
and 43 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 - 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 344 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 - 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 654 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 - 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 99 more
#VU75217 - Improper input validation
CVE-2023-26049		 CWE-20 Low
No
No
 - 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more
#VU70530 - Deserialization of Untrusted Data
CVE-2022-45047		 CWE-502 High
Available
No
 - 28.12.2022 SB2022122828
SB2022122920
SB2023011148
and 49 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881		 CWE-835 Medium
No
No
 - 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more


Showing elements 1 - 20 out of 36