Oracle's quarterly update resolves 59 vulnerabilities

Share this article:

Oracle has released its quarterly security update to plug 59 security holes.

Twenty-one of the vulnerabilities reside in the Solaris product suite, the Unix-based enterprise operating system now produced by Oracle after its acquisition of Sun Microsystems. Tuesday's release also addresses six flaws in the popular Database Server, the most severe of which earned a score of 7.8 (out of 10) on the company's Common Vulnerability Scoring System (CVSS).

But Eric Maurice, software security assurance director at Oracle, said in a blog post that two flaws affecting Secure Backup and one affecting TimesTen In-Memory Database earned the highest-possible CVSS scores, making them high-priority patches because of the vulnerabilities' ease of exploitation and the impact of a successful attack.

In addition, the update covers vulnerabilities in Fusion Middleware, Enterprise Manager, E-Business Suite, Supply Chains Product Suite and PeopleSoft Enterprise.

A security advisory from Oracle lists all of the holes being patched.

Share this article:

Sign up to our newsletters

More in News

In Cisco probe, misuse or compromise spotted on all firms' networks

In Cisco probe, misuse or compromise spotted on ...

Cisco analyzed the business networks of 30 multinational companies last year, and revealed the findings in its 2014 Annual Security Report.

Fareit trojan observed spreading Necurs, Zbot and CryptoLocker

The Necurs and Zbot trojans, as well as CryptoLocker ransomware, has been observed by researchers as being spread through another trojan, known as Fareit.

Post Heartbleed, tech giants join initiative to bolster open source

Post Heartbleed, tech giants join initiative to bolster ...

The newly formed Core Infrastructure Initiative, created to boost under-funded open source projects, will tackle OpenSSL first.