CVE-2020-14642: 
Oracle Coherence vulnerability analysis and mitigation

Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: CacheStore). Supported versions affected are 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 and 14.1.1.0.0. This is an easily exploitable vulnerability that allows unauthenticated attackers with network access via HTTP to compromise Oracle Coherence (Oracle Advisory).

The vulnerability has been assigned a CVSS 3.1 Base Score of 7.5 (High) with the vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The scoring indicates that the vulnerability is network-accessible, requires low attack complexity, needs no privileges or user interaction, and primarily impacts system availability (NVD).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Oracle Coherence. The vulnerability specifically impacts the availability of the system, with no direct impact on confidentiality or integrity (Oracle Advisory).

The vulnerability is classified as easily exploitable, requiring only network access via HTTP with no authentication or special privileges. No user interaction is needed for exploitation, making it particularly concerning for exposed systems (NVD).

Oracle has released security patches for this vulnerability as part of their July 2020 Critical Patch Update. Organizations running affected versions of Oracle Coherence should apply the available security patches immediately (Oracle Advisory).