Tuesday, May 13, 2025
HomeSecurity UpdateOracle Releases Critical Patch Update that Covers 334 Vulnerabilities Across All the...

Oracle Releases Critical Patch Update that Covers 334 Vulnerabilities Across All the Products

Published on

SIEM as a Service

Follow Us on Google News

Oracle Releases Critical Patch Updates that contains security fixes for 334 products across all the families.

The Oracle Patch Update covers products including Oracle Database Server, Oracle Global Lifecycle Management, Oracle Fusion Middleware, Oracle E-Business Suite, Oracle PeopleSoft, Oracle Siebel CRM, Oracle Industry Applications, Oracle Java SE, Oracle Virtualization, Oracle MySQL, and Oracle Sun Systems Products Suite.

37% of vulnerabilities fixed are with third-party components that added with the Oracle product distributions.

Eric Maurice director of Oracle Security assurance said that 90% of the vulnerabilities fixed in the critical security patch are non-Oracle CVEs and these Non-Oracle CVEs also make up 56% of the Critical and High vulnerabilities addressed in this Critical Patch Update.
- Advertisement - Google News

Each vulnerability can be identified by a CVE# vulnerability identifier and score according to CVSS version 3.0.

“Oracle is actively engaged with Intel and other industry partners to come up with technical mitigations against these processor vulnerabilities(Spectre) as they are being reported.”

Users on the Windows and Mac OS X platforms can use automatic updates option’s to get the latest release without delay.

According to Oracle advisory, the Oracle Patch Update covers only the product that comes under the Premier Support or Extended Support phases. Products that do not come under Premier Support or Extended Support are not tested are not tested for vulnerabilities.

Refer the critical patch advisory for Affected Products and it’s Patch Availability.

Also Read

Cisco Released Security Updates and Fixed Critical Vulnerabilities that Affected Cisco Products

Adobe Released Security Updates & Fixes for 112 Vulnerabilities that Affected Adobe Products

Debian Released Security Updates for July and Fixed Multiple Package Vulnerabilities

Gurubaran
Gurubaran
Gurubaran is a co-founder of Cyber Security News and GBHackers On Security. He has 10+ years of experience as a Security Consultant, Editor, and Analyst in cybersecurity, technology, and communications.

Latest articles

Microsoft Patch Tuesday May 2025 Released With the Fixes for 72 Flaws With 5 Actively Exploited 0-Day

Microsoft has released its May 2025 Patch Tuesday updates, addressing 72 security vulnerabilities across...

Ivanti Released Security Updates to Fix for the Mutiple RCE Vulnerabilities – Patch Now

Ivanti, a leading enterprise software provider, has released critical security updates addressing vulnerabilities across...

Fortinet FortiVoice Zero-day Vulnerability Actively Exploited in The Wild

A critical stack-based buffer overflow vulnerability (CWE-121) has been discovered in multiple Fortinet products,...

Ransomware Attacks Surge by 123% Amid Evolving Tactics and Strategies

The 2025 Third-Party Breach Report from Black Kite highlights a staggering 123% surge in...

Resilience at Scale

Why Application Security is Non-Negotiable

The resilience of your digital infrastructure directly impacts your ability to scale. And yet, application security remains a critical weak link for most organizations.

Application Security is no longer just a defensive play—it’s the cornerstone of cyber resilience and sustainable growth. In this webinar, Karthik Krishnamoorthy (CTO of Indusface) and Phani Deepak Akella (VP of Marketing – Indusface), will share how AI-powered application security can help organizations build resilience by

Discussion points


Protecting at internet scale using AI and behavioral-based DDoS & bot mitigation.
Autonomously discovering external assets and remediating vulnerabilities within 72 hours, enabling secure, confident scaling.
Ensuring 100% application availability through platforms architected for failure resilience.
Eliminating silos with real-time correlation between attack surface and active threats for rapid, accurate mitigation

More like this

Metasploit Update Adds Erlang/OTP SSH Exploit and OPNSense Scanner

The open-source penetration testing toolkit Metasploit has unveiled a major update, introducing four new...

Ghidra 11.3 Released – A Major Update to NSA’s Open-Source Tool

The National Security Agency (NSA) has officially released Ghidra 11.3, the latest iteration of...

Android Security Update Fixes Linux Kernel RCE Flaw Allow Read/Write Access

On February 3, 2025, Google published its February Android Security Bulletin, which addresses a...