Oracle fixes 76 security vulnerabilities in October update

This month, Oracle released its critical patch update and Java SE critical patch update at the same time. A full 56 vulnerabilities were patched in Oracle products, such as Oracle Database, Fusion Middleware, Application Server, Business Intelligence Enterprise Edition, Identity Management, WebLogic Portal and Server, Outside In Technology, Enterprise Manager Grid Control, and the E-Business Suite.

The remaining 20 patches were for flaws in Java SE and JRocket, which was added to the Java SE update this month. Oracle said 19 of these flaws could be exploited remotely without authentication.

“Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply [critical patch update] fixes as soon as possible”, the company stressed in its advisory. Amichai Shulman, chief technology officer at Imperva, said that Oracle’s critical patch scoring system downplays vulnerabilities, particularly for its database product.