# Oracle Coherence vulnerabilities Source: https://junglewise.ai/threats/technologies/coherence Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 9 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/coherence.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 113 vulnerabilities in Oracle Coherence: 0 in the last 7 days and 8 in the last 90 days, 69 of them critical and 0 exploited in the wild. The most recent, CVE-2026-83416, was published on 15 September 2026. Nothing in the last four weeks, down from 8 vulnerabilities in the four before. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 8 - All time: 113 (69 critical, 0 exploited in the wild) ## About Oracle Coherence An in-memory data grid solution for clustered applications and data processing. ## Latest Oracle Coherence vulnerabilities - [CVE-2026-83416: Oracle Coherence partial denial of service via HTTP](https://junglewise.ai/threats/cve-2026-83416-oracle-coherence-partial-denial-of-service-via-http) (medium, CVSS 4.3, published 15 Sep 2026) - [CVE-2026-83415: Oracle Coherence privilege escalation via HTTP](https://junglewise.ai/threats/cve-2026-83415-oracle-coherence-privilege-escalation-via-http) (high, CVSS 7.5, published 15 Sep 2026) - [CVE-2026-83414: Oracle Coherence information disclosure in Core component](https://junglewise.ai/threats/cve-2026-83414-oracle-coherence-information-disclosure-in-core-component) (low, CVSS 2.5, published 15 Sep 2026) - [CVE-2026-83413: Oracle Coherence integrity bypass in Core](https://junglewise.ai/threats/cve-2026-83413-oracle-coherence-integrity-bypass-in-core) (low, CVSS 1.9, published 15 Sep 2026) - [CVE-2026-83412: Oracle Coherence unauthorized data access vulnerability](https://junglewise.ai/threats/cve-2026-83412-oracle-coherence-unauthorized-data-access-vulnerability) (high, CVSS 8.1, published 15 Sep 2026) - [CVE-2026-83411: Oracle Coherence privilege escalation in Core](https://junglewise.ai/threats/cve-2026-83411-oracle-coherence-privilege-escalation-in-core) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-83410: Oracle Coherence privilege escalation in Core component](https://junglewise.ai/threats/cve-2026-83410-oracle-coherence-privilege-escalation-in-core-component) (high, CVSS 8.8, published 15 Sep 2026) - [CVE-2026-83354: Oracle Coherence unauthorized data access vulnerability](https://junglewise.ai/threats/cve-2026-83354-oracle-coherence-unauthorized-data-access-vulnerability) (medium, CVSS 6.3, published 15 Sep 2026) - [CVE-2026-60309: Oracle Coherence compromise in Core component](https://junglewise.ai/threats/cve-2026-60309-oracle-coherence-compromise-in-core-component) (high, CVSS 8.8, published 21 Jul 2026) - [CVE-2026-60308: Oracle Coherence remote compromise in Core component](https://junglewise.ai/threats/cve-2026-60308-oracle-coherence-remote-compromise-in-core-component) (critical, CVSS 9.8, published 21 Jul 2026) - [CVE-2026-60307: Oracle Coherence information disclosure in Core component](https://junglewise.ai/threats/cve-2026-60307-oracle-coherence-information-disclosure-in-core-component) (medium, CVSS 4.3, published 21 Jul 2026) - [CVE-2026-60306: Oracle Coherence remote compromise in Core component](https://junglewise.ai/threats/cve-2026-60306-oracle-coherence-remote-compromise-in-core-component) (critical, CVSS 9.8, published 21 Jul 2026) - [CVE-2026-60305: Oracle Coherence data manipulation in Core component](https://junglewise.ai/threats/cve-2026-60305-oracle-coherence-data-manipulation-in-core-component) (high, CVSS 7.1, published 21 Jul 2026) - [CVE-2026-60304: Oracle Coherence denial of service in Core component](https://junglewise.ai/threats/cve-2026-60304-oracle-coherence-denial-of-service-in-core-component) (medium, CVSS 6.5, published 21 Jul 2026) - [CVE-2026-60303: Oracle Coherence partial denial of service in Core component](https://junglewise.ai/threats/cve-2026-60303-oracle-coherence-partial-denial-of-service-in-core-component) (medium, CVSS 4.3, published 21 Jul 2026) - [CVE-2026-60302: Oracle Coherence remote compromise in Core component](https://junglewise.ai/threats/cve-2026-60302-oracle-coherence-remote-compromise-in-core-component) (critical, CVSS 9.8, published 21 Jul 2026) - [CVE-2026-60301: Oracle Coherence denial of service in Core component](https://junglewise.ai/threats/cve-2026-60301-oracle-coherence-denial-of-service-in-core-component) (high, CVSS 7.5, published 21 Jul 2026) - [CVE-2026-60300: Oracle Coherence remote compromise in Core component](https://junglewise.ai/threats/cve-2026-60300-oracle-coherence-remote-compromise-in-core-component) (critical, CVSS 9.8, published 21 Jul 2026) - [CVE-2026-60299: Oracle Coherence remote compromise in Core component](https://junglewise.ai/threats/cve-2026-60299-oracle-coherence-remote-compromise-in-core-component) (critical, CVSS 9.8, published 21 Jul 2026) - [CVE-2026-60298: Oracle Coherence remote compromise in Core component](https://junglewise.ai/threats/cve-2026-60298-oracle-coherence-remote-compromise-in-core-component) (critical, CVSS 9.8, published 21 Jul 2026) - [CVE-2026-60297: Oracle Coherence remote compromise in Core component](https://junglewise.ai/threats/cve-2026-60297-oracle-coherence-remote-compromise-in-core-component) (critical, CVSS 9.8, published 21 Jul 2026) - [CVE-2026-60296: Oracle Coherence remote compromise in Core component](https://junglewise.ai/threats/cve-2026-60296-oracle-coherence-remote-compromise-in-core-component) (critical, CVSS 9.8, published 21 Jul 2026) - [CVE-2026-60295: Oracle Coherence remote takeover in Core component](https://junglewise.ai/threats/cve-2026-60295-oracle-coherence-remote-takeover-in-core-component) (high, CVSS 8.5, published 21 Jul 2026) - [CVE-2026-60290: Oracle Coherence remote compromise in Core component](https://junglewise.ai/threats/cve-2026-60290-oracle-coherence-remote-compromise-in-core-component) (critical, CVSS 9.8, published 21 Jul 2026) - [CVE-2026-60289: Oracle Coherence remote compromise in Core component](https://junglewise.ai/threats/cve-2026-60289-oracle-coherence-remote-compromise-in-core-component) (critical, CVSS 9.8, published 21 Jul 2026) ## Most severe Oracle Coherence vulnerabilities - [CVE-2026-35308: Oracle Coherence improper access control in Centralized Third Party Jars](https://junglewise.ai/threats/cve-2026-35308-oracle-coherence-improper-access-control-in-centralized-third) (critical, CVSS 10, published 17 Jun 2026) - [CVE-2026-35307: Oracle Coherence improper access control in Core component](https://junglewise.ai/threats/cve-2026-35307-oracle-coherence-improper-access-control-in-core-component) (critical, CVSS 10, published 17 Jun 2026) - [CVE-2026-60217: Oracle Coherence remote compromise in Core component](https://junglewise.ai/threats/cve-2026-60217-oracle-coherence-remote-compromise-in-core-component) (critical, CVSS 10, published 21 Jul 2026) - [CVE-2026-35310: Oracle Coherence improper access control in Core component](https://junglewise.ai/threats/cve-2026-35310-oracle-coherence-improper-access-control-in-core-component) (critical, CVSS 9.8, published 17 Jun 2026) - [CVE-2026-35309: Oracle Coherence improper access control in Centralized Third Party Jars](https://junglewise.ai/threats/cve-2026-35309-oracle-coherence-improper-access-control-in-centralized-third) (critical, CVSS 9.8, published 17 Jun 2026) - [CVE-2026-35304: Oracle Coherence authentication bypass in Core component](https://junglewise.ai/threats/cve-2026-35304-oracle-coherence-authentication-bypass-in-core-component) (critical, CVSS 9.8, published 17 Jun 2026) - [CVE-2026-60308: Oracle Coherence remote compromise in Core component](https://junglewise.ai/threats/cve-2026-60308-oracle-coherence-remote-compromise-in-core-component) (critical, CVSS 9.8, published 21 Jul 2026) - [CVE-2026-60306: Oracle Coherence remote compromise in Core component](https://junglewise.ai/threats/cve-2026-60306-oracle-coherence-remote-compromise-in-core-component) (critical, CVSS 9.8, published 21 Jul 2026) - [CVE-2026-60302: Oracle Coherence remote compromise in Core component](https://junglewise.ai/threats/cve-2026-60302-oracle-coherence-remote-compromise-in-core-component) (critical, CVSS 9.8, published 21 Jul 2026) - [CVE-2026-60300: Oracle Coherence remote compromise in Core component](https://junglewise.ai/threats/cve-2026-60300-oracle-coherence-remote-compromise-in-core-component) (critical, CVSS 9.8, published 21 Jul 2026) ## Vulnerabilities per week Nothing in the last four weeks, down from 8 vulnerabilities in the four before. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 8 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Oracle technologies - [Oracle MySQL Server](https://junglewise.ai/threats/technologies/mysql-server): 163 vulnerabilities - [Oracle Hyperion Financial Management](https://junglewise.ai/threats/technologies/hyperion-financial-management): 142 vulnerabilities - [Oracle Helidon](https://junglewise.ai/threats/technologies/helidon): 130 vulnerabilities - [Oracle MySQL Cluster](https://junglewise.ai/threats/technologies/mysql-cluster): 129 vulnerabilities - [Oracle E-Business Suite](https://junglewise.ai/threats/technologies/e-business-suite): 110 vulnerabilities - [Oracle WebCenter Content](https://junglewise.ai/threats/technologies/webcenter-content): 110 vulnerabilities - [Oracle Commerce Guided Search](https://junglewise.ai/threats/technologies/commerce-guided-search): 104 vulnerabilities - [Oracle Commerce Experience Manager](https://junglewise.ai/threats/technologies/commerce-experience-manager): 102 vulnerabilities - [Oracle JD Edwards EnterpriseOne Tools](https://junglewise.ai/threats/technologies/jd-edwards-enterpriseone-tools): 101 vulnerabilities - [Oracle PeopleSoft Enterprise PeopleTools](https://junglewise.ai/threats/technologies/peopletools): 101 vulnerabilities - [Oracle Java SE](https://junglewise.ai/threats/technologies/java-se): 92 vulnerabilities - [Oracle VirtualBox](https://junglewise.ai/threats/technologies/virtualbox): 86 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "Oracle Coherence vulnerabilities", https://junglewise.ai/threats/technologies/coherence, 9 November 2026.