As expected, Oracle has issued a critical patch update containing 73 new security vulnerability fixes across hundreds of its products. Oracle also warns that due to the threat posed by a successful attack, customers should apply Critical Patch Update fixes as soon as possible.
Details on the critical path update are available here.
Historically, Oracle has been criticized over its response time to security vulnerabilities, and the level of concern seems to be increasing within the information security industry.
With many more products to support and maintain, many are voicing concern over the ability of the database giant to keep up with security fixes for its database products. Counting thousands of banks and healthcare organizations as clients, Oracle’s database products store some of the most sensitive data there is.
Is Oracle doing everything in its power to maintain the security of its database products and responding appropriately to newly identified security vulnerabilities? Many industry experts don’t think so. (Click Here to Reach the Related Column on Why Many are Concerned Over Oracle’s Response to Security Vulnerabilities)

More from SecurityWeek News
- Threat Hunting Summit Virtual Event NOW LIVE
- Video: ESG – CISO’s Guide to an Emerging Risk Cornerstone
- Threat Modeling Firm IriusRisk Raises $29 Million
- SentinelOne Announces $100 Million Venture Fund
- Today: 2022 CISO Forum Virtual Event
- Cymulate Closes $70M Series D Funding Round
- SecurityWeek to Host CISO Forum Virtually September 13-14, 2022: Registration is Open
- Privilege Escalation Flaw Haunts VMware Tools
Latest News
- Google Temporarily Offering $180,000 for Full Chain Chrome Exploit
- Russia Blames US Intelligence for iOS Zero-Click Attacks
- Toyota Discloses New Data Breach Involving Vehicle, Customer Information
- Cisco Acquiring Armorblox for Predictive and Generative AI Technology
- Moxa Patches MXsecurity Vulnerabilities That Could Be Exploited in OT Attacks
- Amazon Settles Ring Customer Spying Complaint
- Organizations Warned of Salesforce ‘Ghost Sites’ Exposing Sensitive Information
- Adobe Inviting Researchers to Private Bug Bounty Program
