Oracle Releases Critical Patch Update for April 2011

2011-04-1500:00:00

us-cert.cisa.gov

4.4 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:M/Au:N/C:P/I:P/A:P

JSON

Oracle has released their Critical Patch Update for April 2011 to address 73 vulnerabilities across multiple products. This update contains the following security fixes:

6 updates for the Oracle Database Server
9 updates for Oracle Fusion Middleware
1 update for Oracle Enterprise Manager Grid Control
4 updates for Oracle E-Business Suite
1 update for Oracle Supply Chain Products Suite
14 updates for Oracle PeopleSoft Products
8 updates for Oracle JD Edwards Products
3 updates for Oracle Siebel CRM
1 update for Oracle Industry Applications
18 updates for Oracle Sun Products Suite
8 updates for Oracle Open Office Suite

US-CERT encourages users and administrators to review the April Critical Patch Update and apply any necessary updates to mitigate the risks. Additional information regarding CVE-2011-0794 and CVE-2011-0808 can be found in US-CERT Vulnerability Note VU#520721.

This product is provided subject to this Notification and this Privacy & Use policy.

Please share your thoughts.

We recently updated our anonymous product survey; we’d welcome your feedback.