Known vulnerabilities in Oracle Coherence

Vendor: Oracle
Software: Oracle Coherence
Software CPE: cpe:2.3:a:oracle:oracle_coherence:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 29
Public exploits: 5
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Oracle Coherence Oracle Coherence is affected by 29 known vulnerabilities: 7 high, 19 medium, 3 low Critical High Medium Low

Vulnerabilities (29)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU114316 - Resource exhaustion
CVE-2025-5115		 CWE-400 Medium
No
No
 - 21.08.2025 SB2025082101
SB2025082751
SB20250828111
and 42 more
#VU114026 - Resource exhaustion
CVE-2025-55163		 CWE-400 Medium
No
No
 - 13.08.2025 SB2025081378
SB2025081948
SB2025081949
and 71 more
#VU103770 - Improper input validation
CVE-2025-24970		 CWE-20 Medium
No
No
 - 11.02.2025 SB2025021186
SB202502197190
SB2025030409
and 88 more
#VU98516 - Server-Side Request Forgery (SSRF)
CVE-2024-6763		 CWE-918 Medium
No
No
 - 14.10.2024 SB20241014107
SB2024112849
SB2024120517
and 49 more
#VU87779 - Exposure of sensitive information to an unauthorized actor
CVE-2024-29025		 CWE-200 Medium
No
No
 - 25.03.2024 SB2024032532
SB2024040230
SB2024042995
and 95 more
#VU86808 - Resource exhaustion
CVE-2024-22201		 CWE-400 Medium
No
No
 - 26.02.2024 SB2024022652
SB2024030711
SB2024030845
and 43 more
#VU84537 - Inadequate Encryption Strength
CVE-2023-48795		 CWE-326 Low
Available
No
 - 19.12.2023 SB2023121903
SB2023121905
SB2023121906
and 343 more
#VU81728 - Resource exhaustion
CVE-2023-44487		 CWE-400 High
Available
Exploited
 - 10.10.2023 SB2023101023
SB2023101024
SB2023101037
and 651 more
#VU77573 - Resource exhaustion
CVE-2023-34462		 CWE-400 Medium
No
No
 - 20.06.2023 SB2023062026
SB2023072521
SB2023072539
and 98 more
#VU75217 - Improper input validation
CVE-2023-26049		 CWE-20 Low
No
No
 - 18.04.2023 SB2023041842
SB2023051821
SB2023060836
and 78 more
#VU70530 - Deserialization of Untrusted Data
CVE-2022-45047		 CWE-502 High
Available
No
 - 28.12.2022 SB2022122828
SB2022122920
SB2023011148
and 49 more
#VU70118 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-41881		 CWE-835 Medium
No
No
 - 12.12.2022 SB2022121215
SB2023011210
SB2023011757
and 74 more
#VU68635 - Deserialization of Untrusted Data
CVE-2022-42003		 CWE-502 Medium
No
No
 - 25.10.2022 SB2022102509
SB2022102510
SB2022103117
and 208 more
#VU65484 - Improper input validation
CVE-2022-21570		 CWE-20 Medium
No
No
 - 20.07.2022 SB2022072032
#VU62849 - Creation of Temporary File With Insecure Permissions
CVE-2022-24823		 CWE-378 Low
No
No
 - 09.05.2022 SB2022050902
SB2022063002
SB2022072013
and 55 more
#VU62520 - Improper input validation
CVE-2022-21420		 CWE-20 High
No
No
 - 22.04.2022 SB2022042296
#VU61810 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2021-43797		 CWE-444 Medium
No
No
 - 02.04.2022 SB2021120923
SB2022040202
SB2022042223
and 49 more
#VU61799 - Out-of-bounds write
CVE-2020-36518		 CWE-787 Medium
No
No
 - 01.04.2022 SB2022040113
SB2022040114
SB2022040115
and 147 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 - 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU55346 - Improper input validation
CVE-2021-2428		 CWE-20 High
No
No
 - 27.07.2021 SB2021072743
SB2021080540


Showing elements 1 - 20 out of 29