Login Request a demo
CO
Product
Coherence
by Oracle · last CVE Sep 15, 2026
On CISA KEVExploited in the wild
128
CVEs
1
On KEV
10.0
Max CVSS
0
New 30D
Vulnerabilities128In the news0Timeline
Severity mix
Critical 73High 34Medium 19Low 2
Severity
All severities128Critical73High34Medium19Low2
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Coherence to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-2371
7.5
1%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 3.7.1.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2021-2344
7.5
1%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 3.7.1.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2021-2277
7.5
1%
Apr 22
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 3.7.1.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2020-25649
7.5
18%
Dec 3
A flaw was found in FasterXML Jackson Databind, where it did not have entity expansion secured properly
Affected: 12.2.1.4.0; 14.1.1.0.0
CVE-2020-14642
7.5
2%
Jul 15
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: CacheStore)
Affected: 3.7.1.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0; 14.1.1.0.0
CVE-2026-60245
7.2
0%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2026-60305
7.1
0%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2026-60304
6.5
0%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2026-60243
6.5
0%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2026-60213
6.5
0%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2021-43797
6.5
3%
Dec 9
HTTP fails to validate against control chars in header names which may lead to HTTP request smuggling
Affected: 12.2.1.4.0; 14.1.1.0.0
CVE-2026-60265
6.0
0%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2026-60266
5.9
0%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2021-21409
5.9
5%
Mar 30
Possible request smuggling in HTTP/2 due missing validation of content-length
Affected: 12.2.1.4.0; 14.1.1.0.0
CVE-2026-60270
5.5
0%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2026-60282
5.4
0%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2026-60238
5.4
0%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2026-60231
5.4
0%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2026-60283
5.3
0%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2026-60260
5.3
0%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2026-60237
5.3
0%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2020-2949
5.3
1%
Apr 15
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, CacheStore, Invocation)
Affected: 3.7.1.0; 12.1.3.0.0; 12.2.1.3.0; 12.2.1.4.0
CVE-2026-83416
4.3
0%
Sep 15
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2026-60307
4.3
0%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2026-60303
4.3
0%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
CVE-2026-60233
4.3
0%
Jul 21
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 15.1.1.0.0
CVE-2026-83414
2.5
0%
Sep 15
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 15.1.1.0.0
CVE-2026-83413
1.9
0%
Sep 15
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core)
Affected: 12.2.1.4.0; 14.1.1.0.0; 14.1.2.0.0; 15.1.1.0.0
Page 3 of 3 · 128 total
123