When I was issued a client laptop, an Oracle Coherence vulnerability was reported as part of the local Oracle JDeveloper 12.2.1.4 installation on Windows.
This blog walks through the patching process.
1. Navigate to Oracle Support and download the Oracle Coherence patch number 35122398 and the latest