Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in

Oracle Critical Patch Update Advisory - January 2025

🗓️ 21 Jan 2025 00:00:00Reported by OracleType 
oracle
 oracle🔗 www.oracle.com👁 154 Views

January 2025 Oracle Critical Patch Update contains 318 new security patches for Oracle products.

Related
Detection
ReporterTitlePublishedViews
Family
bdu_fstec
BDU FSTEC		The vulnerability of the BIND DNS server component, which allows a perpetrator to cause a service failure.
15 Apr 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the Apache HTTP Server’s web server lies in its failure to properly handle CRLF sequences in HTTP headers. This allows attackers to perform attacks that involve splitting HTTP responses.
19 Apr 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the UriComponentsBuilder component in the Spring Framework’s URL analysis mechanism allows attackers to perform SSRF attacks.
19 Apr 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the iconv() function in the system library glibc, which allows a hacker to execute arbitrary code
22 Apr 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the `pkcs12.serialize_key_and_certificates` function in the Python programming language’s cryptography package allows a malicious actor to cause a Python program to crash.
25 Apr 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the Criteria.parse() function in the Java library JsonPath, which allows a attacker to trigger a service failure
26 Apr 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the PasswordBasedDecrypter component in the Nimbus JOSE + JWT Java library allows a hacker to trigger a service failure.
26 Apr 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the library for performing rapid, customizable HTML AntiSamy cleanup, related to the lack of measures taken to protect the structure of web pages, allows attackers to execute cross-site scripting (XSS) attacks.
26 Apr 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the WSGI-server Gunicorn, related to defects in HTTP request processing, allows attackers to circumvent existing security restrictions and execute a “HTTP request hijacking” attack.
7 May 202400:00
–bdu_fstec
bdu_fstec
BDU FSTEC		The vulnerability of the NSCCD server caching service in the GNU C Library allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
8 May 202400:00
–bdu_fstec
Rows per page
Vulners
Node
OR
oracleadvanced_outbound_telephonyRange12.2.3–12.2.10
oracleagile_engineering_data_managementMatch6.2.1
oracleagile_plm_frameworkMatch9.3.6
oracleanalytics_desktopMatch8.1.0
oracleapplication_expressMatch23.2
oracleapplication_expressMatch24.1
oracleapplication_testing_suiteMatch13.3.0.1
oraclebanking_corporate_lending_process_managementRange14.4.0.0.0–14.7.0.0.0
oraclebanking_liquidity_managementMatch14.7.5.0.0
oraclebanking_originationRange14.5.0.0.0–14.7.0.0.0
oraclebi_publisherMatch7.0.0.0.0
oraclebi_publisherMatch7.6.0.0.0
oraclebusiness_activity_monitoringMatch12.2.1.4.0
oraclebusiness_intelligenceMatch7.0.0.0.0enterprise
oraclebusiness_intelligenceMatch7.6.0.0.0
oraclebusiness_intelligenceMatch12.2.1.4.0enterprise
oraclebusiness_process_management_suiteMatch12.2.1.4.0
mysqlclusterMatch7.6.32
mysqlclusterMatch8.0.40
mysqlclusterMatch8.4.3
mysqlclusterMatch9.1.0
oraclecommerce_guided_searchMatch11.3.2
oraclecommunications_billing_and_revenue_managementRange12.0.0.4–12.0.0.8
oraclecommunications_billing_and_revenue_managementRange15.0.0.0–15.0.0.1
oraclecommunications_brm_-_elastic_charging_engineRange12.0.0.4–12.0.0.8
oraclecommunications_brm_-_elastic_charging_engineMatch15.0.0.0
oraclecommunications_brm_-_elastic_charging_engineMatch15.0.1.0
oraclecommunications_cloud_native_core_automated_test_suiteMatch24.2.0
oraclecommunications_cloud_native_core_binding_support_functionMatch24.2.0
oraclecommunications_cloud_native_core_binding_support_functionMatch24.2.1
oraclecommunications_cloud_native_core_certificate_managementMatch24.2.1
oraclecommunications_cloud_native_core_consoleMatch24.2.1
oraclecommunications_cloud_native_core_dbtierMatch24.1.0
oraclecommunications_cloud_native_core_dbtierMatch24.2.0
oraclecommunications_cloud_native_core_network_function_cloud_native_environmentMatch24.2.0
oraclecommunications_cloud_native_core_network_function_cloud_native_environmentMatch24.3.0
oraclecommunications_cloud_native_core_network_repository_functionMatch24.2.2
oraclecommunications_cloud_native_core_policyRange24.2.0–24.2.2
oraclecommunications_cloud_native_core_security_edge_protection_proxyMatch24.2.0
oraclecommunications_cloud_native_core_security_edge_protection_proxyMatch24.2.1
oraclecommunications_cloud_native_core_security_edge_protection_proxyMatch24.2.2
oraclecommunications_cloud_native_core_security_edge_protection_proxyMatch23.4.0
oraclecommunications_cloud_native_core_service_communication_proxyMatch24.2.0
oraclecommunications_cloud_native_core_service_communication_proxyMatch24.3.0
oraclecommunications_cloud_native_core_unified_data_repositoryMatch24.3.0
oraclecommunications_cloud_native_core_unified_data_repositoryMatch24.2.3
oraclecommunications_cloud_native_core_unified_data_repositoryMatch24.2.2
oraclecommunications_cloud_native_core_unified_data_repositoryMatch23.4.4
oraclecommunications_cloud_native_core_unified_data_repositoryMatch24.1.1
oraclecommunications_converged_application_serverMatch8.0
oraclecommunications_converged_application_serverMatch8.1
oraclecommunications_convergenceMatch3.0.2.0.0
oraclecommunications_convergenceMatch3.0.3.0.0
oraclecommunications_convergenceMatch3.0.3.3.0
oraclecommunications_diameter_signaling_routerMatch8.2.3.0.0
oraclecommunications_diameter_signaling_routerRange9.0.0.0.0–9.0.2.0.0
oraclecommunications_diameter_signaling_routerMatch8.6.0.4.0
oraclecommunications_diameter_signaling_routerMatch9.0
oraclecommunications_diameter_signaling_routerMatch9.0.0.0.0
oraclecommunications_eagle_element_management_systemMatch47.0.0.0.0
oraclecommunications_messaging_serverMatch8.1.0.26
oraclecommunications_network_analytics_data_directorMatch24.1.0
oraclecommunications_network_analytics_data_directorMatch24.2.0
oraclecommunications_offline_mediation_controllerMatch12.0.0.8
oraclecommunications_offline_mediation_controllerMatch15.0.0.0
oraclecommunications_offline_mediation_controllerMatch15.0.1.0
oraclecommunications_operations_monitorMatch5.1
oraclecommunications_operations_monitorMatch5.2
oraclecommunications_order_and_service_managementMatch7.4.0
oraclecommunications_order_and_service_managementMatch7.4.1
oraclecommunications_order_and_service_managementMatch7.5.0
oraclecommunications_policy_managementMatch15.0.0.0.0
oraclecommunications_service_catalog_and_designMatch8.0.0.3
oraclecommunications_service_catalog_and_designMatch8.1.0.1
oraclecommunications_session_border_controllerMatch9.2.0
oraclecommunications_session_border_controllerMatch9.3.0
oraclecommunications_unified_assuranceRange6.0.4–6.0.5
oraclecommunications_unified_assuranceRange6.0.0–6.0.5
oraclecommunications_unified_assuranceRange6.0.1–6.0.5
oraclecommunications_unified_inventory_managementMatch7.4.1
oraclecommunications_unified_inventory_managementMatch7.4.2
oraclecommunications_user_data_repositoryMatch12.11
oraclecommunications_user_data_repositoryMatch14.0
oraclecommunications_user_data_repositoryMatch15.0
mysqlconnectorsMatch9.1.0
oraclecustomer_careRange12.2.5–12.2.13
mysqlenterprise_backupMatch8.0.40
mysqlenterprise_backupMatch8.4.3
mysqlenterprise_backupMatch9.1.0
oracleenterprise_communications_brokerMatch4.1.0
oracleenterprise_communications_brokerMatch4.2.0
mysqlenterprise_firewallMatch8.0.40
mysqlenterprise_firewallMatch8.4.3
mysqlenterprise_firewallMatch9.1.0
oracleenterprise_managerMatch13.5.2.0.0mysql_database
oracleenterprise_manager_base_platformMatch13.5.0.0
oraclefinancial_services_analytical_applications_infrastructureMatch8.0.7.8
oraclefinancial_services_analytical_applications_infrastructureMatch8.0.8.6
oraclefinancial_services_analytical_applications_infrastructureMatch8.1.2.5
oraclefinancial_services_behavior_detection_platformMatch8.0.8.1
oraclefinancial_services_behavior_detection_platformMatch8.1.2.7
oraclefinancial_services_behavior_detection_platformMatch8.1.2.8
oraclefinancial_services_compliance_studioMatch8.1.2.5
oraclefinancial_services_compliance_studioMatch8.1.2.6
oraclefinancial_services_model_management_and_governanceMatch8.1.2.6
oraclefinancial_services_model_management_and_governanceMatch8.1.2.7
oraclefinancial_services_model_management_and_governanceMatch8.1.3.0
oraclefinancial_services_regulatory_reportingMatch8.1.2.7
oraclefinancial_services_regulatory_reportingMatch8.1.2.8
oraclefinancial_services_revenue_management_and_billingRange2.9.0.0.0–7.0.0.0.0
oraclefinancial_services_trade-based_anti_money_launderingMatch8.0.8enterprise
oraclegoldengateRange21.3–21.16
oraclegoldengateRange23.4–23.6
oraclegoldengate_big_data_and_application_adaptersRange19.1.0.0.0–19.1.0.0.18
oraclegoldengate_big_data_and_application_adaptersRange21.3.0.0.0–21.16.0.0.0
oraclegoldengate_big_data_and_application_adaptersRange23.4–23.6
oraclehospitality_opera_5Match5.6.19.20
oraclehospitality_opera_5Match5.6.25.8
oraclehospitality_opera_5Match5.6.26.6
oraclehospitality_opera_5Match5.6.27.1
oraclehttp_serverMatch12.2.1.4.0
oraclehyperion_data_relationship_managementMatch11.2.19.0.000
oracleidentity_managerMatch12.2.1.4.0
oraclejava_seMatch8u431
oraclejava_seMatch8u431-perf
oraclejd_edwards_enterpriseone_orchestratorMatch9.2.9.2
oraclejd_edwards_enterpriseone_toolsMatch9.2.9.0
oraclejd_edwards_enterpriseone_toolsMatch9.2.9.2
arguslife_sciences_safetyMatch8.2.3
oraclelife_sciences_empirica_signalMatch9.2.3
oraclemanaged_file_transferMatch12.2.1.4.0
oraclemiddleware_common_libraries_and_toolsMatch12.2.1.4.0
oracleoracle_graalvmMatch17.0.13jdk
oracleoracle_graalvmMatch21.0.5jdk
oracleoracle_graalvmMatch23.0.1jdk
oracleoracle_graalvmMatch20.3.16enterprise
oracleoracle_graalvmMatch21.3.12enterprise
oracleoracle_java_seMatch11.0.25
oracleoracle_java_seMatch17.0.13
oracleoracle_java_seMatch21.0.5
oracleoracle_java_seMatch23.0.1
oracleoutside_in_technologyMatch8.5.7
oraclepeoplesoft_enterprise_cc_common_application_objectsMatch9.2
oraclepeoplesoft_enterprise_fin_cash_managementMatch9.2
oraclepeoplesoft_enterprise_fin_esettlementsMatch9.2
oraclepeoplesoft_enterprise_peopletoolsMatch8.60
oraclepeoplesoft_enterprise_peopletoolsMatch8.61
oraclepeoplesoft_enterprise_scm_purchasingMatch9.2
oracleprimavera_p6_enterprise_project_portfolio_managementRange20.12.1.0–20.12.21.5
oracleprimavera_p6_enterprise_project_portfolio_managementRange21.12.1.0–21.12.20.0
oracleprimavera_p6_enterprise_project_portfolio_managementRange22.12.1.0–22.12.16.0
oracleprimavera_p6_enterprise_project_portfolio_managementRange23.12.1.0–23.12.10.0
oracleprimavera_p6_enterprise_project_portfolio_managementMatch22.12.1.0
oracleprimavera_unifierRange20.12.0–20.12.16
oracleprimavera_unifierRange21.12.0–21.12.17
oracleprimavera_unifierRange22.12.0–22.12.15
oracleprimavera_unifierRange23.12.0–23.12.12
oracleprimavera_unifierMatch24.12.0
oracleproject_foundationRange12.2.3–12.2.13
oraclerest_data_servicesMatch24.2.0
oraclerest_data_servicesMatch24.3.0
oracleretail_financial_integrationMatch14.1.3.2
oracleretail_financial_integrationMatch15.0.3.1
oracleretail_financial_integrationMatch16.0.3.0
oracleretail_financial_integrationMatch19.0.1.0
oracleretail_integration_busMatch14.1.3.2
oracleretail_integration_busMatch15.0.3.1
oracleretail_integration_busMatch16.0.3.0
oracleretail_integration_busMatch19.0.1.0
oraclesd-wan_edgeRange9.1.1.5–9.1.1.8
oraclesd-wan_edgeRange9.1.1.5–9.1.1.9
oraclesd-wan_edgeRange9.1.1.0–9.1.1.8
oraclesecure_backupMatch18.1.0.1.0
oraclesecure_backupMatch18.1.0.2.0
oraclesecure_backupMatch19.1.0.0.0
oraclesecurity_serviceMatch12.2.1.4.0
mysqlserverMatch8.0.39
mysqlserverMatch8.4.2
mysqlserverMatch9.0.1
mysqlserverMatch8.0.40
mysqlserverMatch8.4.3
mysqlserverMatch9.1.0
mysqlserverMatch8.0.36
mysqlserverMatch8.4.0
oraclesiebel_crm_end_userMatch24.11
oraclesolarisMatch11
oracleutilities_application_frameworkRange4.3.0.3.0–4.3.0.6.0
oracleutilities_application_frameworkMatch4.4.0.0.0
oracleutilities_application_frameworkMatch4.4.0.2.0
oracleutilities_application_frameworkMatch4.4.0.3.0
oracleutilities_application_frameworkMatch4.5.0.0.0
oracleutilities_application_frameworkMatch4.5.0.1.1
oracleutilities_application_frameworkMatch4.5.0.1.3
oracleutilities_application_frameworkRange24.1.0.0.0–24.3.0.0.0
oracleutilities_network_management_systemMatch2.5.0.1.14
oracleutilities_network_management_systemMatch2.5.0.2.9
oracleutilities_network_management_systemMatch2.6.0.1.5
oracleutilities_network_management_systemMatch2.5.0.1.15
oracleutilities_network_management_systemMatch2.6.0.1.7
oracleutilities_testing_acceleratorRange6.0.0.1.0–6.0.0.3.0
oracleutilities_testing_acceleratorRange7.0.0.0.0–7.0.0.1.0
oraclevm_virtualboxMatch7.0.24
oraclevm_virtualboxMatch7.1.6
oraclewebcenter_portalMatch12.2.1.4.0
oracleweblogic_serverMatch12.2.1.4.0
oracleweblogic_serverMatch14.1.1.0.0
oracleweblogic_serverMatch14.1.2.0.0
oracleworkflowRange12.2.3–12.2.14

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
11 Feb 2025 00:00Current
8.2High risk
Vulners AI Score8.2
CVSS 28.5
CVSS 3.19.8 - 10
CVSS 39.8
CVSS 49.5
EPSS0.99999
SSVC
january 2025critical patch updateoracle productssecurity vulnerabilitiessecurity patchesoracle agile plm framework
154