Oracle to patch 88 vulnerabilities
Oracle will release 88 vulnerability fixes across hundreds of its offerings as part of a scheduled quarterly security update.
The fixes address flaws in its popular database servers, former Sun products, the Solaris operating system and the MySQL database, according to Qualys CTO Wolfgang Kandek. Qualys makes vulnerability management products.
Some of the patches affect multiple offerings. Oracle's top priority is a fix for JRockit of Fusion Middleware, having earned a CVSS 2.0 score of 10 out of 10. The Common Vulnerability Scoring System - CVSS - is an open standard method of rating IT security vulnerabilities. "A large number, 33, of the 88 patches are for the most critical class of vulnerabilities, remote code execution (RCE) vulnerabilities, which are software flaws that allow a remote attacker to exploit the targeted software without prior authentication," Kandek said.
