Oracle issues critical out-of-cycle security patch

Oracle has released a critical security patch to fix a number of vulnerabilities in its E-Business Suite software.

Oracle has released a critical security patch to fix a number of vulnerabilities in its E-Business Suite software.

The patch has been released two months ahead of Oracle’s scheduled quarterly security patching cycle, and may signal that the company is moving towards more regular updates in response to increasing threats.

The patch fixes a number of vulnerabilities in the Oracle Diagnostics troubleshooting component of the firm’s E-Business Suite 11i platform.

The bugs relate to the Oracle Diagnostics web pages and to the Java classes included with the software.

One problem allows some of the diagnostics to be executed without any authentication. The vulnerabilities could allow remote attackers to take over company systems.

Oracle has publicised the vulnerabilities and is encouraging users to update their systems immediately.

Oracle's next full security update is scheduled for 18 April.

The quarterly updates have been used by Oracle for a year. The last release saw 82 bugs ironed out.

CW+

Features

Enjoy the benefits of CW+ membership, learn more and join.

Read more on Hackers and cybercrime prevention

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchCIO

SearchSecurity

  • Dissecting the Hack

    In this excerpt from chapter three of Dissecting the Hack: The V3RB0TEN Network, authors Jayson E. Street, Kristin Sims and Brian...

  • Digital Identity Management

    In this excerpt of Digital Identity Management, authors Maryline Laurent and Samia Bousefrane discuss principles of biometrics ...

  • Becoming a Global Chief Security Executive Officer

    In this excerpt of Becoming a Global Chief Security Executive Officer: A How to Guide for Next Generation Security Leaders, ...

SearchNetworking

SearchDataCenter

SearchDataManagement

Close