Oracle's quarterly update resolves 59 vulnerabilities

Share this article:

Oracle has released its quarterly security update to plug 59 security holes.

Twenty-one of the vulnerabilities reside in the Solaris product suite, the Unix-based enterprise operating system now produced by Oracle after its acquisition of Sun Microsystems. Tuesday's release also addresses six flaws in the popular Database Server, the most severe of which earned a score of 7.8 (out of 10) on the company's Common Vulnerability Scoring System (CVSS).

But Eric Maurice, software security assurance director at Oracle, said in a blog post that two flaws affecting Secure Backup and one affecting TimesTen In-Memory Database earned the highest-possible CVSS scores, making them high-priority patches because of the vulnerabilities' ease of exploitation and the impact of a successful attack.

In addition, the update covers vulnerabilities in Fusion Middleware, Enterprise Manager, E-Business Suite, Supply Chains Product Suite and PeopleSoft Enterprise.

A security advisory from Oracle lists all of the holes being patched.

Share this article:
You must be a registered member of SC Magazine to post a comment.

Sign up to our newsletters

TOP COMMENTS

More in News

Study: Canada C-Suite execs say companies prepared for threats

A survey of Canadian business execs found that just over a quarter had experienced a cyber attack.

PHP vulnerabilities patched

Developers patched multiple vulnerabilities in PHP that would have allowed remote code execution.

Pennyslvania man sentenced after 'swatting' prank

Pennyslvania man sentenced after 'swatting' prank

David Barnhouse was sentenced to 18 months in prison after he hacked into a neighbor's Verizon FiOS router to post a bomb threat on a Pennsylvania mall's website.