Lucene search

OracleORACLE:CPUOCT2024

HistoryOct 15, 2024 - 12:00 a.m.

Oracle Critical Patch Update Advisory - October 2024

2024-10-1500:00:00

www.oracle.com

security patches

oracle code

third party components

cumulative

vulnerabilities

malicious exploit

customer

mos note

product families

security advisories

october 2024

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

0.963

Percentile

99.6%

JSON

A Critical Patch Update is a collection of patches for multiple security vulnerabilities. These patches address vulnerabilities in Oracle code and in third party components included in Oracle products. These patches are usually cumulative, but each advisory describes only the security patches added since the previous Critical Patch Update Advisory. Thus, prior Critical Patch Update advisories should be reviewed for information regarding earlier published security patches. Refer to “Critical Patch Updates, Security Alerts and Bulletins” for information about Oracle Security advisories.

Oracle continues to periodically receive reports of attempts to maliciously exploit vulnerabilities for which Oracle has already released security patches. In some instances, it has been reported that attackers have been successful because targeted customers had failed to apply available Oracle patches. Oracle therefore strongly recommends that customers remain on actively-supported versions and apply Critical Patch Update security patches without delay.

This Critical Patch Update contains 334 new security patches across the product families listed below. Please note that an MOS note summarizing the content of this Critical Patch Update and other Oracle Software Security Assurance activities is located at October 2024 Critical Patch Update: Executive Summary and Analysis.

Affected configurations

Vulners

Node

oracleapplication_expressRange≤23.2

oracleapplication_expressRange≤24.1

oracleapplication_expressRange≤23.1

oracleblockchain_platformRange≤21.1.2

oracleessbaseRange≤21.6

oraclegoldengate_stream_analyticsRange≤19.1.0.0.0

oraclegoldengate_big_data_and_application_adaptersRange≤19.1.0.0.0

oraclenosql_databaseRange≤22.3.45

oraclenosql_databaseRange≤21.2.71

oraclenosql_databaseRange≤23.3.33

oraclenosql_databaseRange≤20.3.40

oraclenosql_databaseRange≤24.1.17

oraclesecure_backupRange≤18.1.0.2.0

oraclesecure_backupRange≤18.1.0.1.0

oraclesql_developerRange≤23.1.0

oraclecommerce_guided_searchRange≤11.3.2

oraclecommerce_guided_searchRange≤11.4.0

oraclecommerce_platformRange≤11.3.1

oraclecommerce_platformRange≤11.3.0

oraclecommerce_platformRange≤11.3.2

oraclecommunications_unified_assuranceRange≤5.5.0

oraclecommunications_unified_assuranceRange≤6.0.0

oraclecommunications_convergent_charging_controllerRange≤12.0.1.0.0

oraclecommunications_convergent_charging_controllerRange≤15.0.0.0.0

oraclecommunications_convergent_charging_controllerRange≤6.0.1.0.0

oraclecommunications_ip_service_activatorRange≤7.4.0

oraclecommunications_ip_service_activatorRange≤7.5.0

oraclecommunications_messaging_serverRange≤8.1

oraclecommunications_network_charging_and_controlRange≤12.0.1.0.0

oraclecommunications_network_charging_and_controlRange≤15.0.0.0.0

oraclecommunications_network_charging_and_controlRange≤6.0.1.0.0

oraclecommunications_asapRange≤7.4.3.0.2

oraclecommunications_order_and_service_managementRange≤7.4.0

oraclecommunications_order_and_service_managementRange≤7.5.0

oraclecommunications_order_and_service_managementRange≤7.4.1

oraclecommunications_cloud_native_core_unified_data_repositoryRange≤24.2.0

oracleenterprise_communications_brokerRange≤4.2.0

oracleenterprise_communications_brokerRange≤4.1.0

oraclesd-wan_awareRange≤9.0.1.10.0

oraclesd-wan_edgeRange≤9.1.1.3.0

oraclesd-wan_edgeRange≤9.1.1.8.0

oraclesd-wan_edgeRange≤9.1.1.9.0

oraclesd-wan_edgeRange≤9.1.1.5.0

oraclecommunications_cloud_native_core_binding_support_functionRange≤23.4.0

oraclecommunications_cloud_native_core_network_repository_functionRange≤24.2.1

oraclecommunications_cloud_native_core_network_repository_functionRange≤23.4.4

oraclecommunications_cloud_native_core_policyRange≤23.4.0

oraclecommunications_cloud_native_core_security_edge_protection_proxyRange≤24.2.0

oraclecommunications_cloud_native_core_security_edge_protection_proxyRange≤23.4.2

oraclecommunications_cloud_native_core_service_communication_proxyRange≤24.2.0

oraclecommunications_cloud_native_core_service_communication_proxyRange≤24.1.0

oraclecommunications_cloud_native_core_service_communication_proxyRange≤23.4.0

oraclecommunications_analyticsRange≤24.2.0

oraclecommunications_analyticsRange≤24.1.0

oraclecommunications_analyticsRange≤23.4.0

oraclecommunications_cloud_native_core_automated_test_suiteRange≤23.4.3

oraclecommunications_cloud_native_core_automated_test_suiteRange≤24.2.2

oraclecommunications_cloud_native_core_automated_test_suiteRange≤23.4.4

oraclecommunications_cloud_native_core_automated_test_suiteRange≤24.1.1

oraclecommunications_cloud_native_core_network_slice_selection_functionRange≤24.2.0

oraclecommunications_cloud_native_core_policyRange≤23.4.3

oraclecommunications_cloud_native_core_policyRange≤24.2.0

oraclecommunications_cloud_native_core_policyRange≤23.4.2

oraclecommunications_cloud_native_core_consoleRange≤24.2.0

oraclecommunications_cloud_native_core_consoleRange≤23.4.2

oraclecommunications_session_route_managerRange≤9.1.5

oraclecommunications_session_border_controllerRange≤9.2.0

oraclecommunications_session_border_controllerRange≤9.1.0

oraclecommunications_session_border_controllerRange≤9.3.0

oracleenterprise_operations_monitorRange≤5.2

oracleenterprise_operations_monitorRange≤5.1

oraclemanagement_cloud_engineRange≤24.1.0.0.0

oraclecommunications_cloud_native_core_policyRange≤24.2.0

oraclecommunications_cloud_native_core_policyRange≤24.1.0

oraclecommunications_operations_monitorRange≤5.2

oraclecommunications_operations_monitorRange≤5.1

oraclecommunications_policy_managementRange≤12.6.1.0.0

oraclecommunications_policy_managementRange≤15.0.0.0.0

oraclecommunications_user_data_repositoryRange≤12.11.0

oraclecommunications_user_data_repositoryRange≤14.0

oraclecommunications_cloud_native_core_network_function_cloud_native_environmentRange≤24.1.0

oraclecommunications_cloud_native_core_network_function_cloud_native_environmentRange≤23.4.0

oraclecommunications_lsmsRange≤14.0.0.1

oraclecommunications_eagle_application_processorRange≤17.0.1

oraclecommunications_performance_intelligence_centerRange≤10.4.0.4

oracleadvanced_pricingRange≤12.2.3

oracleapplications_managerRange≤12.2.11

oraclecommon_applications_calendarRange≤12.2.6

oraclepublic_sector_financialsRange≤12.2.3

oraclelanded_cost_managementRange≤12.2.12

oraclefield_serviceRange≤12.2.3

-oracle_financialsRange≤12.2.3

oracleincentive_compensationRange≤12.2.3

oraclemanufacturing_execution_system_for_process_manufacturingRange≤12.2.3

oraclemanufacturing_execution_system_for_process_manufacturingRange≤12.2.13

oracleproduct_hubRange≤12.2.3

oraclequotingRange≤12.2.7

oracleservice_contractsRange≤12.2.5

oraclesite_hubRange≤12.2.3

oraclesourcingRange≤12.2.3

oraclework_in_processRange≤12.2.3

oracleinstalled_baseRange≤12.2.3

oracleenterprise_command_center_frameworkRange≤11

oracleenterprise_manager_base_platformRange≤13.5.0.0

oracleenterprise_manager_base_platformRange≤12.2.1.4.0

oracleenterprise_manager_for_peoplesoftRange≤13.5.1.1.0

oracleapplication_testing_suiteRange≤13.3.0.1

oraclebanking_cash_managementRange≤14.7.4.0.0

oraclebanking_cash_managementRange≤14.7.5.0.0

oraclebanking_supply_chain_financeRange≤14.7.4.0.0

oraclebanking_supply_chain_financeRange≤14.7.5.0.0

oraclebanking_apisRange≤19.2.0.0.0

oraclebanking_apisRange≤22.1.0.0.0

oraclebanking_apisRange≤21.1.0.0.0

oraclebanking_apisRange≤22.2.0.0.0

oraclebanking_digital_experienceRange≤19.2.0.0.0

oraclebanking_digital_experienceRange≤22.1.0.0.0

oraclebanking_digital_experienceRange≤21.1.0.0.0

oraclebanking_digital_experienceRange≤22.2.0.0.0

oraclefinancial_services_crime_and_compliance_management_studioRange≤8.1.2.8

oraclefinancial_services_crime_and_compliance_management_studioRange≤8.1.2.7

oraclebanking_liquidity_managementRange≤14.7.4.0.0

oraclebanking_liquidity_managementRange≤14.5.0.12.0

oraclebanking_liquidity_managementRange≤14.7.0.6.0

oraclebanking_liquidity_managementRange≤14.7.5.0.0

oraclefinancial_services_revenue_management_and_billingRange≤4.0.0.0.0

oraclefinancial_services_revenue_management_and_billingRange≤5.0.0.0.0

oraclefinancial_services_revenue_management_and_billingRange≤3.0.0.0.0

oraclebanking_corporate_lending_process_managementRange≤14.5.0.0.0

oraclebanking_corporate_lending_process_managementRange≤14.6.0.0.0

oraclebanking_corporate_lending_process_managementRange≤14.4.0.0.0

oraclebanking_corporate_lending_process_managementRange≤14.7.0.0.0

oraclehospitality_simphonyRange≤19.1.0

oracleoutside_in_technologyRange≤8.5.7

oracleweblogic_serverRange≤12.2.1.4.0

oracleweblogic_serverRange≤14.1.1.0.0

oraclewebcenter_interactionRange≤14.1.1.0.0

oracledata_integratorRange≤12.2.1.4.0

oraclebusiness_activity_monitoringRange≤12.2.1.4.0

oraclebusiness_process_management_suiteRange≤12.2.1.4.0

oracleenterprise_data_qualityRange≤12.2.1.4.0

oracleaccess_managerRange≤12.2.1.4.0

oraclemiddleware_common_libraries_and_toolsRange≤12.2.1.4.0

oracleenterprise_manager_for_fusion_middlewareRange≤12.2.1.4.0

oracleglobal_lifecycle_management_opatchRange≤12.2.1.4.0

oraclehttp_serverRange≤12.2.1.4.0

oraclehttp_serverRange≤14.1.1.0.0

oraclemanaged_file_transferRange≤12.2.1.4.0

oracleservice_busRange≤12.2.1.4.0

oraclewebcenter_sitesRange≤12.2.1.4.0

oraclewebcenter_portalRange≤12.2.1.4.0

oracleidentity_manager_connectorRange≤11.1.1.5.0

oracleidentity_manager_connectorRange≤12.2.1.3.0

oracleenterprise_manager_for_fusion_middlewareRange≤12.2.1.4.0

oraclebusiness_intelligenceRange≤7.0.0.0.0enterprise

oraclebusiness_intelligenceRange≤7.6.0.0.0enterprise

oraclebusiness_intelligenceRange≤12.2.1.4.0enterprise

oraclebi_publisherRange≤7.0.0.0.0

oraclebi_publisherRange≤7.6.0.0.0

oraclebi_publisherRange≤12.2.1.4.0

oraclehospitality_opera_5Range≤5.6.26.4

oraclehospitality_opera_5Range≤5.6.19.19

oraclehospitality_opera_5Range≤5.6.25.8

oraclehospitality_cruise_shipboard_property_management_systemRange≤23.1.3

oraclehyperion_financial_managementRange≤11.2.18.0.000

oraclehyperion_infrastructure_technologyRange≤11.2.18.0.000

oraclehyperion_bi\+Range≤11.2.18.0.000

oraclegraalvm_for_jdkRange≤23

oraclegraalvm_for_jdkRange≤17.0.12

oraclegraalvm_for_jdkRange≤21.0.4

oraclejava_seRange≤8u421

oraclejava_seRange≤21.3.11

oraclegraalvm_for_jdkRange≤21.0.4

oraclegraalvm_for_jdkRange≤23

oraclegraalvm_for_jdkRange≤8u421

oraclegraalvm_for_jdkRange≤17.0.12

oraclegraalvm_for_jdkRange≤11.0.24

oraclegraalvm_for_jdkRange≤21.3.11

oraclejava_seRange≤21.0.4

oraclejava_seRange≤23

oraclejava_seRange≤8u421

oraclejava_seRange≤17.0.12

oraclejava_seRange≤11.0.24

oraclemysql_clusterRange≤9.0.0

oraclemysql_clusterRange≤7.6.31

oraclemysql_clusterRange≤8.4.1

oraclemysql_clusterRange≤8.0.38

oraclemysql_clusterRange≤8.0.39

oraclemysql_clusterRange≤7.5.35

oraclemysql_clusterRange≤8.4.2

oraclemysql_clusterRange≤9.0.1

oraclemysql_connectorsRange≤9.0.0

oraclemysql_connectorsRange≤8.0.39

oraclemysql_enterprise_backupRange≤9.0.1

oraclemysql_enterprise_backupRange≤8.0.39

oraclemysql_enterprise_backupRange≤8.4.2

oraclemysql_enterprise_monitorRange≤8.0.39

mysqlmysql_serverRange≤8.4.1

mysqlmysql_serverRange≤8.4.0

mysqlmysql_serverRange≤8.0.38

mysqlmysql_serverRange≤8.0.39

mysqlmysql_serverRange≤8.4.2

mysqlmysql_serverRange≤9.0.1

mysqlmysql_serverRange≤8.0.35

oraclemysql_workbenchRange≤8.0.38

-mysql_clientRange≤9.0.1

-mysql_clientRange≤8.0.39

-mysql_clientRange≤8.4.2

oraclepeoplesoft_enterprise_peopletoolsRange≤8.61

oraclepeoplesoft_enterprise_peopletoolsRange≤8.59

oraclepeoplesoft_enterprise_peopletoolsRange≤8.60

oraclepeoplesoft_enterprise_hcm_global_payroll_switzerlandRange≤9.2.48

oraclepeoplesoft_enterprise_cost_center_common_application_objectsRange≤9.2

oraclepeoplesoft_enterprise_learning_managementRange≤9.2

oraclepeoplesoft_enterprise_fin_receivablesRange≤9.2

oracleretail_eftlinkRange≤20.0.1

oracleretail_eftlinkRange≤23.0.0

oracleretail_eftlinkRange≤22.0.0

oracleretail_eftlinkRange≤21.0.0

oracleretail_customer_management_and_segmentation_foundationRange≤19.0.0.10

oraclesiebel_crmRange≤24.7

oraclesiebel_apps_-_marketingRange≤24.7

oracleautovue_for_agile_product_lifecycle_managementRange≤21.1.0

oracleagile_plmRange≤9.3.6

oraclesolaris_clusterRange≤4

oracleutilities_frameworkRange≤4.0.0.3.0

oracleutilities_frameworkRange≤4.0.0.0.0

oracleutilities_frameworkRange≤4.3.0.3.0

oracleutilities_frameworkRange≤4.5.0.0.0

oracleutilities_frameworkRange≤4.0.0.2.0

oracleutilities_network_management_systemRange≤2.5.0.1.14

oracleutilities_network_management_systemRange≤2.5.0.2.8

oracleutilities_network_management_systemRange≤2.6.0.1.5

oraclevm_virtualboxRange≤7.0.22

oraclevm_virtualboxRange≤7.1.2

VendorProductVersionCPE
oracleapplication_express*cpe:2.3:a:oracle:application_express:*:*:*:*:*:*:*:*
oracleblockchain_platform*cpe:2.3:a:oracle:blockchain_platform:*:*:*:*:*:*:*:*
oracleessbase*cpe:2.3:a:oracle:essbase:*:*:*:*:*:*:*:*
oraclegoldengate_stream_analytics*cpe:2.3:a:oracle:goldengate_stream_analytics:*:*:*:*:*:*:*:*
oraclegoldengate_big_data_and_application_adapters*cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters:*:*:*:*:*:*:*:*
oraclenosql_database*cpe:2.3:a:oracle:nosql_database:*:*:*:*:*:*:*:*
oraclesecure_backup*cpe:2.3:a:oracle:secure_backup:*:*:*:*:*:*:*:*
oraclesql_developer*cpe:2.3:a:oracle:sql_developer:*:*:*:*:*:*:*:*
oraclecommerce_guided_search*cpe:2.3:a:oracle:commerce_guided_search:*:*:*:*:*:*:*:*
oraclecommerce_platform*cpe:2.3:a:oracle:commerce_platform:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oracle	application_express	*	cpe:2.3:a:oracle:application_express::::::::
oracle	blockchain_platform	*	cpe:2.3:a:oracle:blockchain_platform::::::::
oracle	essbase	*	cpe:2.3:a:oracle:essbase::::::::
oracle	goldengate_stream_analytics	*	cpe:2.3:a:oracle:goldengate_stream_analytics::::::::
oracle	goldengate_big_data_and_application_adapters	*	cpe:2.3:a:oracle:goldengate_big_data_and_application_adapters::::::::
oracle	nosql_database	*	cpe:2.3:a:oracle:nosql_database::::::::
oracle	secure_backup	*	cpe:2.3:a:oracle:secure_backup::::::::
oracle	sql_developer	*	cpe:2.3:a:oracle:sql_developer::::::::
oracle	commerce_guided_search	*	cpe:2.3:a:oracle:commerce_guided_search::::::::
oracle	commerce_platform	*	cpe:2.3:a:oracle:commerce_platform::::::::