+44 (0)115 933 8474 hello@n4stack.co.uk

Oracle Patch Update July 2017 (Database Server)

by | Jul 19, 2017

Oracle Update July 2017

Oracle Patch Update July 2017 (Database Server)

Oracle have released their latest critical patch update for Database Server yesterday evening (18/7). This Oracle Critical Patch Update includes 4 new security fixes for Oracle Database and a vulnerability for Oracle REST Data services (formerly Application Express listener).  These updates are available for the below supported versions:

  • Oracle Database Server 11.2.0.4
  • Oracle Database Server 12.1.0.1
  • Oracle Database Server 12.1.0.2

 

The highest scoring vulnerability in OJVM is an easily exploitable vulnerability and allows a low privileged attacker having Create Session, Create Procedure privilege with network access via multiple protocols to compromise OJVM. While the vulnerability is in OJVM, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in takeover of OJVM. Note: This score is for Windows platforms.

For more information please see the full Oracle update at http://www.oracle.com/technetwork/security-advisory/cpujul2017-3236622.html#AppendixDB

Share This