cve-2026-83414
LOW CVSS 2.5 opencve
Description
Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.1 Base Score 2.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).
Timeline
- Published
- 2026-09-15 20:18 UTC
- Last Modified
- 2026-09-22
CVSS Details
CVSS details not available.
Affected Products
No product information available.
Weaknesses (CWE)
CVSS metrics
| Version | Base | Severity | Vector | Exploitability | Impact | Source |
|---|---|---|---|---|---|---|
| 3.1 | 2.5 | LOW | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N |
mitre | ||
| 3.1 | 2.5 | LOW | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N |
nvd | ||
| 3.1 | 2.5 | LOW | CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N |
opencve |
References
No references available.
Linked Vulnerabilities
No linked vulnerabilities found.
{
"cve": "CVE-2026-83414",
"enrichment": {
"affected": [
{
"configurations": [
{
"platform": null,
"status": "affected",
"versions": {
"scheme": "generic",
"value": "15.1.1.0.0"
}
}
],
"enrichment": {
"confidence": 95.0,
"confidence_source": "inferred",
"scores": [
{
"score": 95.0,
"source": "inferred"
},
{
"score": 100.0,
"source": "matching"
}
]
},
"original": {
"product": "Oracle Coherence",
"source": "cna",
"vendor": "Oracle Corporation"
},
"product": "coherence",
"vendor": "oracle"
}
],
"created": "2026-09-16T05:30:13.141765+00:00",
"updated": "2026-09-22T17:30:18.813613+00:00",
"vendors": [
"oracle",
"oracle$PRODUCT$coherence"
]
},
"epss": {
"score": 0.00128
},
"mitre": {
"cpes": [
"cpe:2.3:a:oracle:coherence:15.1.1.0.0:*:*:*:*:*:*:*"
],
"created": "2026-09-15T20:05:28.697000+00:00",
"description": "Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.1 Base Score 2.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).",
"metrics": {
"cvssV2_0": {},
"cvssV3_0": {},
"cvssV3_1": {
"score": 2.5,
"vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"
},
"cvssV4_0": {}
},
"mitre_repo_path": "cves/2026/83xxx/CVE-2026-83414.json",
"references": [
"https://www.oracle.com/security-alerts/cspusep2026.html"
],
"title": null,
"updated": "2026-09-22T14:31:08.070000+00:00",
"vendors": [
"oracle",
"oracle$PRODUCT$coherence"
],
"weaknesses": []
},
"nvd": {
"cpes": [
"cpe:2.3:a:oracle:coherence:15.1.1.0.0:*:*:*:*:*:*:*"
],
"created": "2026-09-15T20:18:49.793000+00:00",
"description": "Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.1 Base Score 2.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).",
"metrics": {
"cvssV2_0": {},
"cvssV3_0": {},
"cvssV3_1": {
"score": 2.5,
"vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"
},
"cvssV4_0": {}
},
"nvd_repo_path": "2026/CVE-2026-83414.json",
"references": [
"https://www.oracle.com/security-alerts/cspusep2026.html"
],
"title": null,
"updated": "2026-09-22T19:06:50.370000+00:00",
"vendors": [
"oracle",
"oracle$PRODUCT$coherence"
],
"weaknesses": [
"CWE-200"
]
},
"opencve": {
"changes": [
{
"created": "2026-09-15T20:15:00+00:00",
"data": [
{
"details": {
"new": "Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.1 Base Score 2.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).",
"old": null
},
"type": "description"
},
{
"details": [
"oracle",
"oracle$PRODUCT$coherence"
],
"type": "first_time"
},
{
"details": {
"added": [
"cpe:2.3:a:oracle:coherence:15.1.1.0.0:*:*:*:*:*:*:*"
],
"removed": []
},
"type": "cpes"
},
{
"details": {
"added": [
"oracle",
"oracle$PRODUCT$coherence"
],
"removed": []
},
"type": "vendors"
},
{
"details": {
"added": [
"https://www.oracle.com/security-alerts/cspusep2026.html"
],
"removed": []
},
"type": "references"
},
{
"details": {
"added": {
"cvssV3_1": {
"score": 2.5,
"vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"
}
},
"removed": {},
"updated": {}
},
"type": "metrics"
}
],
"id": "4cb08aba-5105-45aa-8009-cd3ce84c464a"
},
{
"created": "2026-09-16T18:45:00+00:00",
"data": [
{
"details": {
"new": "Low-Privileged Data Disclosure in Oracle Coherence 15.1.1.0.0",
"old": null
},
"type": "title"
},
{
"details": {
"added": [
"CWE-200"
],
"removed": []
},
"type": "weaknesses"
}
],
"id": "1c529b89-381d-4e2a-add6-22b1932e6ddd"
},
{
"created": "2026-09-18T21:30:00+00:00",
"data": [
{
"details": {
"new": null,
"old": "Low-Privileged Data Disclosure in Oracle Coherence 15.1.1.0.0"
},
"type": "title"
},
{
"details": {
"added": [],
"removed": [
"CWE-200"
]
},
"type": "weaknesses"
}
],
"id": "6e444dee-4970-4199-ac63-b3c202d075dd"
},
{
"created": "2026-09-20T07:30:00+00:00",
"data": [
{
"details": {
"new": "Local Logon Vulnerability Enabling Unauthorized Data Retrieval in Oracle Coherence",
"old": null
},
"type": "title"
}
],
"id": "3b9d43db-15e9-4eb0-a45c-adbd418f8ddd"
},
{
"created": "2026-09-22T15:30:00+00:00",
"data": [
{
"details": {
"added": [
"CWE-200"
],
"removed": []
},
"type": "weaknesses"
}
],
"id": "3af3453f-0c42-47e5-ad9d-83e9ab5084aa"
},
{
"created": "2026-09-22T17:45:00+00:00",
"data": [
{
"details": {
"new": null,
"old": "Local Logon Vulnerability Enabling Unauthorized Data Retrieval in Oracle Coherence"
},
"type": "title"
}
],
"id": "d4959e30-2264-4b42-a6d7-fe518515533f"
},
{
"created": "2026-09-23T15:30:00+00:00",
"data": [
{
"details": {
"added": {
"ssvc": {
"options": {
"Automatable": "no",
"Exploitation": "none",
"Technical Impact": "partial"
},
"version": "2.0.3"
}
},
"removed": {},
"updated": {}
},
"type": "metrics"
}
],
"id": "cd824bc2-b7b7-4a43-968f-2a87d85fd211"
}
],
"cpes": {
"data": [
"cpe:2.3:a:oracle:coherence:15.1.1.0.0:*:*:*:*:*:*:*"
],
"providers": [
"mitre",
"nvd"
]
},
"created": {
"data": "2026-09-15T20:05:28.697000+00:00",
"provider": "mitre"
},
"description": {
"data": "Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.1 Base Score 2.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).",
"provider": "mitre"
},
"metrics": {
"cvssV2_0": {
"data": {},
"provider": null
},
"cvssV3_0": {
"data": {},
"provider": null
},
"cvssV3_1": {
"data": {
"score": 2.5,
"vector": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N"
},
"provider": "mitre"
},
"cvssV4_0": {
"data": {},
"provider": null
},
"epss": {
"data": {
"score": 0.00128
},
"provider": "first"
},
"kev": {
"data": {},
"provider": null
},
"ssvc": {
"data": {
"options": {
"Automatable": "no",
"Exploitation": "none",
"Technical Impact": "partial"
},
"version": "2.0.3"
},
"provider": "vulnrichment"
},
"threat_severity": {
"data": null,
"provider": null
}
},
"references": {
"data": [
"https://www.oracle.com/security-alerts/cspusep2026.html"
],
"providers": [
"mitre",
"nvd"
]
},
"title": {
"data": null,
"provider": null
},
"updated": {
"data": "2026-09-22T19:06:50.370000+00:00",
"provider": "nvd"
},
"vendors": {
"data": [
"oracle",
"oracle$PRODUCT$coherence"
],
"providers": [
"mitre",
"nvd",
"enrichment"
]
},
"weaknesses": {
"data": [
"CWE-200"
],
"providers": [
"nvd",
"vulnrichment"
]
}
},
"vulnrichment": {
"cpes": [],
"created": "2026-09-15T20:05:28.697000+00:00",
"description": "Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). The supported version that is affected is 15.1.1.0.0. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Coherence executes to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized read access to a subset of Oracle Coherence accessible data. CVSS 3.1 Base Score 2.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N).",
"metrics": {
"cvssV2_0": {},
"cvssV3_0": {},
"cvssV3_1": {},
"cvssV4_0": {},
"kev": {},
"ssvc": {
"options": {
"Automatable": "no",
"Exploitation": "none",
"Technical Impact": "partial"
},
"version": "2.0.3"
}
},
"references": [],
"title": null,
"updated": "2026-09-22T14:30:56.069000+00:00",
"vendors": [],
"vulnrichment_repo_path": "2026/83xxx/CVE-2026-83414.json",
"weaknesses": [
"CWE-200"
]
}
}
Enrichment data
Aggregated bundle (all enrichments)