Oracle to Release Nearly 500 New Security Patches

Oracle is preparing the release of nearly 500 new security patches with its Critical Patch Update (CPU) for January 2022.

According to its pre-release announcement, the company has lined up 483 new patches for the first CPU of 2022, which is scheduled for Tuesday, January 18.

Critical vulnerabilities will be patched in Oracle Essbase, Graph Server and Client, Secure Backup, Communications Applications, Communications, Construction and Engineering, Enterprise Manager, Financial Services Applications, Fusion Middleware, Insurance Applications, PeopleSoft, Support Tools, and Utilities Applications.

High-severity flaws will be fixed in Airlines Data Model, Big Data Graph, Communications Data Model, Commerce, Food and Beverage Applications, E-Business Suite, GoldenGate, Health Sciences Applications, HealthCare Applications, Hospitality Applications, Hyperion, iLearning, JD Edwards, MySQL, Policy Automation, Retail Applications, REST Data Services, Siebel CRM, Supply Chain, Systems, Spatial Studio, and TimesTen In-Memory.

Many of these flaws can be exploited remotely without authentication.

“Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch Update patches as soon as possible,” the company said in its pre-release announcement.

Oracle WebLogic server vulnerabilities are the most commonly exploited, but other products made by the software giant have also been targeted by malicious actors.

The other 2022 CPUs are scheduled for April 19, July 19, and October 18.

The CPUs released by Oracle in January, April, July and October 2021 contained a total of more than 1,400 security fixes.