Security threats Toolkit

Oracle to push out 51 patches

Tom Espiner ZDNet.co.uk

Published: 15 Oct 2007 13:10 BST

Oracle is to push out 51 patches for flaws in its software, in a critical patch update on Tuesday.

The flaws affect many Oracle products. Some of the vulnerabilities addressed in the critical patch update affect multiple products.

The patches include fixes for 27 vulnerabilities in Oracle Database, five of which may be exploited remotely without authentication.

Oracle said it will now use version 2 of the CVSS (common vulnerability scoring system) to rate the severity of flaws. It had previously used CVSS version 1.

Sentry Posts Blog

Guarding the network

What you need to know — and what you and your peers have to tell us — about security management in our new community group blog

The highest-rated Oracle flaw that will be patched has a CVSS version 2 base score of 6.8. Oracle Database's most serious flaw is rated 6.5.

Oracle Application Server is facing 11 security fixes. Seven of these vulnerabilities may be remotely exploitable without authentication, Oracle said in a patch pre-release announcement.

Oracle E-Business Suite, Oracle Enterprise Manager and Oracle PeopleSoft Enterprise products will also receive fixes.