When I was issued a client laptop, an Oracle Coherence vulnerability was reported as part of the local Oracle JDeveloper 12.2.1.4 installation on Windows.

This blog walks through the patching process.

  1. Navigate to Oracle Support and download the Oracle Coherence patch number 35122398 and the latest OPatch patch number 28186730.

2. After unzipping the two patches, run these commands to update to the latest opatch then apply the Coherence patch.

c:\>set ORACLE_HOME=c:\Oracle\Middleware\Oracle_Home c:\>set JAVA_HOME=c:\Progra~1\Java\jdk-20 c:\>cd c:\temp\Coherence_patch_jun2023\p28186730_1394212_Generic\6880880 c:\temp\Coherence_patch_jun2023\p28186730_1394212_Generic\6880880>java -jar C:\temp\Coherence_patch_jun2023\p28186730_1394212_Generic\6880880\opatch_generic.jar -silent oracle_home=c:\oracle\middleware\oracle_home c:\temp\Coherence_patch_jun2023\p28186730_1394212_Generic\6880880>cd c:\temp\p35122398_122140_Generic\1221417 c:\temp\p35122398_122140_Generic\1221417>%ORACLE_HOME%\OPatch\opatch lsinventory -jdk %JAVA_HOME% c:\temp\p35122398_122140_Generic\1221417>%JAVA_HOME%\bin\java -jar %ORACLE_HOME%\coherence\lib\coherence.jar c:\temp\p35122398_122140_Generic\1221417>%ORACLE_HOME%\OPatch\opatch apply 1221417 -jdk %JAVA_HOME% Java HotSpot(TM) 64-Bit Server VM warning: Ignoring option --illegal-access=deny; support was removed in 17.0Oracle Interim Patch Installer version 13.9.4.2.12Copyright (c) 2023, Oracle Corporation. All rights reserved. Oracle Home : c:\Oracle\Middleware\Oracle_Home Central Inventory : C:\Program Files\Oracle\Inventory from : OPatch version : 13.9.4.2.12 OUI version : 13.9.4.0.0 Log file location : c:\Oracle\Middleware\Oracle_Home\cfgtoollogs\opatch\opatch2023-06-06_17-36-05PM_1.log OPatch detects the Middleware Home as "C:\Oracle\Middleware\Oracle_Home" Verifying environment and performing prerequisite checks...OPatch continues with these patches: 1221417 Do you want to proceed? [y|n]y User Responded with: Y All checks passed. Backing up files... Applying interim patch '1221417' to OH 'c:\Oracle\Middleware\Oracle_Home' Patching component oracle.coherence, 12.2.1.4.0...Patch 1221417 successfully applied. Log file location: c:\Oracle\Middleware\Oracle_Home\cfgtoollogs\opatch\opatch2023-06-06_17-36-05PM_1.log OPatch succeeded. c:\temp\p35122398_122140_Generic\1221417>