Oracle Corp. Oracle Coherence
productRUA product tracked in the threat graph; the vulnerabilities below are known to affect it.
by severity
3critical5high6medium0low
updated 2026-10-28
01
vulnerabilities (16)
Related CVEs.
| ID | severity | exploitable |
|---|---|---|
| CVE-2020-2555US | critical9.8OT critical | KEV |
| CVE-2020-14756US | critical9.8 | Exploit |
| CVE-2020-36518US | high7.5 | Exploit |
| CVE-2020-25649US | high7.5 | — |
| CVE-2021-37136US | high7.5 | — |
| CVE-2021-43797US | medium6.5 | — |
| CVE-2020-2915US | critical9.8 | — |
| CVE-2020-14642US | high7.5 | — |
| CVE-2021-2428US | medium6.8 | — |
| CVE-2022-21420US | high7.5 | — |
| CVE-2021-2344US | medium5.0 | — |
| CVE-2020-2949US | medium5.3 | — |
| CVE-2021-2371US | medium5.0 | — |
| CVE-2021-2277US | medium5.0 | — |
| CVE-2022-21570US | — | — |
| CVE-2026-60197US | —OT elevated | — |
02
weaknesses (8)
The flaw types (CWEs) most of these CVEs share.
- CWE-20Improper Input Validation6 CVEs
- CWE-264CWE-2645 CVEs
- CWE-404Improper Resource Shutdown or Release2 CVEs
- CWE-150Improper Neutralization of Escape, Meta, or Control Sequences1 CVEs
- CWE-306Missing Authentication for Critical Function1 CVEs
- CWE-400Uncontrolled Resource Consumption1 CVEs
- CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1 CVEs
- CWE-502Deserialization of Untrusted Data1 CVEs
03
sources (1)
Which sources assert this record, and when.
scry
Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan