Patch/Configuration Management, Vulnerability Management

Oracle quarterly update offers 86 security fixes

Share

Oracle on Tuesday shipped its quarterly security update to close 86 vulnerabilities across its product line. Fixes included six for the company's popular Database Server, 13 for Enterprise Grid Control and 18 for MySQL. The most serious hole plugged was CVE-2013-0361 in the Database Mobile/Lite Server, which is remotely exploitable without authentication. The update from Oracle came two days after it released an out-of-cycle patch for a major Java 7 vulnerability being actively exploited.

Related

Attacks involving critical Ivanti CSA bugs underway

Most serious of the newly discovered bugs were a pair of high-severity issues, the first of which, tracked as CVE-2024-9380, is an operating system command injection flaw that could enable remote code execution, while the second, tracked as CVE-2024-9381, is a path traversal vulnerability allowing restriction evasion among threat actors with admin privileges.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.