The 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0, and 15.1.1.0.0 versions of Coherence installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory.

  - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported     versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable     vulnerability allows unauthenticated attacker with network access via TCP to compromise Oracle Coherence.
    While the vulnerability is in Oracle Coherence, attacks may significantly impact additional products     (scope change). Successful attacks of this vulnerability can result in takeover of Oracle Coherence.
    (CVE-2026-60217)

  - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). Supported     versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0 and 15.1.1.0.0. Easily exploitable     vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Coherence.
    Successful attacks of this vulnerability can result in takeover of Oracle Coherence. (CVE-2026-60225)

  - Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Centralized Third     Party Jars (Apache Log4j)). Supported versions that are affected are 12.2.1.4.0, 14.1.1.0.0, 14.1.2.0.0     and 15.1.1.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via     HTTP to compromise Oracle Coherence. Successful attacks of this vulnerability can result in unauthorized     creation, deletion or modification access to critical data or all Oracle Coherence accessible data.
    (CVE-2026-34481)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The 12.2.1.4.0 and 14.1.2.0.0 versions of WebCenter Portal installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory.

  - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).
    Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low     privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is     in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks     of this vulnerability can result in takeover of Oracle WebCenter Portal. (CVE-2026-60561)

  - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).
    Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low     privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is     in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks     of this vulnerability can result in takeover of Oracle WebCenter Portal. (CVE-2026-60562)

  - Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component: Runtime Tools).
    Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily exploitable vulnerability allows low     privileged attacker with network access via HTTP to compromise Oracle WebCenter Portal. While the vulnerability is     in Oracle WebCenter Portal, attacks may significantly impact additional products (scope change). Successful attacks     of this vulnerability can result in takeover of Oracle WebCenter Portal. (CVE-2026-60565)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The versions of MySQL Cluster installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory.

  - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication     Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
    8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with     logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster.
    Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. (CVE-2026-60163)

  - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported     versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10     and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple     protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in     unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster     and unauthorized read access to a subset of MySQL Server, MySQL Cluster accessible data. (CVE-2026-60315)

  - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported     versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10     and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple     protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover     of MySQL Server, MySQL Cluster. (CVE-2026-60316)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The versions of MySQL Cluster installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory.

  - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Group Replication     Plugin). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster:
    8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with     logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster.
    Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. (CVE-2026-60163)

  - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: X Plugin). Supported     versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10     and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple     protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover     of MySQL Server, MySQL Cluster. (CVE-2026-60316)

  - Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported     versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10     and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple     protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover     of MySQL Server, MySQL Cluster. (CVE-2026-61094)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The versions of MySQL Server installed on the remote host are affected by multiple vulnerabilities as referenced in the July 2026 CPU advisory.

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported     versions that are affected are 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated     attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks     of this vulnerability can result in takeover of MySQL Server. (CVE-2026-60163)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: X Plugin). Supported versions that are     affected are 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with     network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result     in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as     unauthorized read access to a subset of MySQL Server accessible data. (CVE-2026-60315)

  - Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: X Plugin). Supported versions that are     affected are 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with     network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result     in takeover of MySQL Server. (CVE-2026-60316)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Oracle Business Process Management Suite installed on the remote host is affected by multiple vulnerabilities, as referenced in the July 2026 CPU advisory:

  - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware     (component: Human Workflow). Supported versions that are affected are 12.2.1.4.0 and 14.1.2.0.0. Easily     exploitable vulnerability allows low privileged attacker with network access via T3, IIOP to compromise     Oracle Business Process Management Suite. While the vulnerability is in Oracle Business Process Management     Suite, attacks may significantly impact additional products (scope change). Successful attacks of this     vulnerability can result in takeover of Oracle Business Process Management Suite. (CVE-2026-60542)

  - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware     (component: BPM Foundation Services (Apache Mina)). Supported versions that are affected are 12.2.1.4.0 and     14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to     compromise Oracle Business Process Management Suite. Successful attacks of this vulnerability can result in     takeover of Oracle Business Process Management Suite. (CVE-2026-41409)

  - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware     (component: Runtime Engine (Apache Log4j)). Supported versions that are affected are 12.2.1.4.0 and     14.1.2.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to     compromise Oracle Business Process Management Suite. Successful attacks of this vulnerability can result in     unauthorized creation, deletion or modification access to critical data or all Oracle Business Process     Management Suite accessible data. (CVE-2026-34481)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
328968	Oracle Coherence (July 2026 CPU)	Nessus	Misc.	2026/7/22	2026/7/22	critical
329037	Oracle WebCenter Portal (July 2026 CPU)	Nessus	Misc.	2026/7/22	2026/7/22	critical
329072	Oracle MySQL Cluster 9.x < 9.7.2 (July 2026 CPU)	Nessus	Databases	2026/7/22	2026/7/22	high
329073	Oracle MySQL Cluster 8.4.x < 8.4.11 (July 2026 CPU)	Nessus	Databases	2026/7/22	2026/7/22	high
329071	Oracle MySQL Cluster 8.0.x < 8.0.48 (July 2026 CPU)	Nessus	Databases	2026/7/22	2026/7/22	high
329038	Oracle MySQL Server 9.x < 9.7.2 (July 2026 CPU)	Nessus	Databases	2026/7/22	2026/7/22	high
329039	Oracle MySQL Server 8.4.x < 8.4.11 (July 2026 CPU)	Nessus	Databases	2026/7/22	2026/7/22	high
329070	Oracle Business Process Management Suite (12.2.1.4.0 / 14.1.2.0.0) (July 2026 CPU)	Nessus	Misc.	2026/7/22	2026/7/22	critical

检测

插件搜索

critical

critical

high

high

high

high

high

critical