Oracle is releasing a collection of patches for multiple critical security vulnerabilities. The update contains 297 new security fixes across multiple products.
The affected products include: Enterprise Manager, Java SE, MySQL, JD Edwards, Oracle Supply Chain Products, Database, E-Business Suite, Retail Applications, Virtualization, Oracle Banking Platform and many more.
Oracle said that Critical Patch Update patches are typically cumulative, but each advisory only describes the security fixes added since the previous Critical Patch Update advisory.
It should be noted that recently hackers had identified 284 vulnerabilities in Oracle products because the victim customers had not installed the available patches Oracle
The vulnerabilities have been patched and Oracle recommends that its customers remain on actively supported versions and immediately install the Critical Patch Update fixes.
Some of the vulnerabilities can be exploited , allowing an attacker to take complete control of the vulnerable system. Therefore, installing the patch as soon as possible will reduce the risk of a successful attack by blocking the network protocols required by an attack.
Many of the vulnerabilities mentioned in this Critical Patch Update affect many products and a CVE has been assigned for each vulnerability.
Here you can find all affected Oracle products.
