CVEvulnerability

CVE-2020-14756

9.8 CRITICAL Published 2021-01-20 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2021-01-20
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1 ([email protected])
9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P

Description

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core Components). Supported versions that are affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via IIOP, T3 to compromise Oracle Coherence. Successful attacks of this vulnerability can result in takeover of Oracle Coherence. CVSS 3.1 Base Score 9.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H).

Affected configurations

• oracle coherence 3.7.1.0 • oracle coherence 12.1.3.0.0 • oracle coherence 12.2.1.3.0 • oracle coherence 12.2.1.4.0 • oracle coherence 14.1.1.0.0 • oracle utilities framework (>= 4.3.0.1.0 <= 4.3.0.6.0) • oracle utilities framework 4.2.0.2.0 • oracle utilities framework 4.2.0.3.0 • oracle utilities framework 4.4.0.0.0 • oracle utilities framework 4.4.0.2.0 • oracle utilities framework 4.4.0.3.0

References