Oracle's quarterly update resolves 59 vulnerabilities

Share this article:

Oracle has released its quarterly security update to plug 59 security holes.

Twenty-one of the vulnerabilities reside in the Solaris product suite, the Unix-based enterprise operating system now produced by Oracle after its acquisition of Sun Microsystems. Tuesday's release also addresses six flaws in the popular Database Server, the most severe of which earned a score of 7.8 (out of 10) on the company's Common Vulnerability Scoring System (CVSS).

But Eric Maurice, software security assurance director at Oracle, said in a blog post that two flaws affecting Secure Backup and one affecting TimesTen In-Memory Database earned the highest-possible CVSS scores, making them high-priority patches because of the vulnerabilities' ease of exploitation and the impact of a successful attack.

In addition, the update covers vulnerabilities in Fusion Middleware, Enterprise Manager, E-Business Suite, Supply Chains Product Suite and PeopleSoft Enterprise.

A security advisory from Oracle lists all of the holes being patched.

Share this article:

Sign up to our newsletters

More in News

New backdoor 'Baccamun' spreads through ActiveX exploit

Symantec researchers revealed that the backdoor is dropped after attackers exploit a Windows ActiveX vulnerability.

Outdated browsers put U.K. users at risk of malware

A blog post on Check and Secure website said 70 percent of U.K. users haven't fully updated their internet browsers

Survey: 53 percent change privileged logins quarterly

A Lieberman Software survey highlights the issue or poor password management, even among security pros.