NotCVE - vendor:"Oracle" product:"Coherence" version:"3.7.1.0"

9 results (0.014 seconds)

CVSS: 7.8EPSS: 0%CPEs: 4EXPL: 0

CVE-2022-21570

https://notcve.org/view.php?id=CVE-2022-21570

19 Jul 2022 — Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 3.7.1.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Coherence. CVSS 3.1 Base Score 7.5 (Availability imp... • https://www.oracle.com/security-alerts/cpujul2022.html •

CVSS: 7.5EPSS: 1%CPEs: 5EXPL: 0

CVE-2021-2371

https://notcve.org/view.php?id=CVE-2021-2371

20 Jul 2021 — Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3, IIOP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Coherence. CVSS 3.1 Base Score 7.5 (Avai... • https://www.oracle.com/security-alerts/cpujul2021.html •

CVSS: 7.5EPSS: 1%CPEs: 5EXPL: 0

CVE-2021-2344

https://notcve.org/view.php?id=CVE-2021-2344

CVSS: 7.5EPSS: 2%CPEs: 5EXPL: 0

CVE-2021-2277

https://notcve.org/view.php?id=CVE-2021-2277

22 Apr 2021 — Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all Oracle Coherence accessible data. CVSS 3.1 Base Score 7.5 (Confidentiality... • https://www.oracle.com/security-alerts/cpuapr2021.html •

CVSS: 9.8EPSS: 87%CPEs: 11EXPL: 2

CVE-2020-14756

https://notcve.org/view.php?id=CVE-2020-14756

20 Jan 2021 — Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). • https://github.com/Y4er/CVE-2020-14756 •

CVSS: 7.8EPSS: 1%CPEs: 5EXPL: 0

CVE-2020-14642

https://notcve.org/view.php?id=CVE-2020-14642

15 Jul 2020 — Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: CacheStore). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Coherence. CVSS 3.1 Base Score 7.5 (Av... • https://www.oracle.com/security-alerts/cpujul2020.html • CWE-404: Improper Resource Shutdown or Release •

CVSS: 5.3EPSS: 1%CPEs: 4EXPL: 0

CVE-2020-2949

https://notcve.org/view.php?id=CVE-2020-2949

15 Apr 2020 — Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, CacheStore, Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.0 Base Score 5.3 (Confidentiality impacts... • https://www.oracle.com/security-alerts/cpuapr2020.html •

CVSS: 9.8EPSS: 3%CPEs: 4EXPL: 0

CVE-2020-2915

https://notcve.org/view.php?id=CVE-2020-2915

15 Apr 2020 — Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching, CacheStore, Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). • https://www.oracle.com/security-alerts/cpuapr2020.html •

CVSS: 9.8EPSS: 93%CPEs: 21EXPL: 14

CVE-2020-2555 – Oracle Multiple Products Remote Code Execution Vulnerability

https://notcve.org/view.php?id=CVE-2020-2555

15 Jan 2020 — Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Caching,CacheStore,Invocation). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0 and 12.2.1.4.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.0 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). • https://packetstorm.news/files/id/157207 • CWE-502: Deserialization of Untrusted Data •