Oracle to release 115 security patches

[InfoSec News <alerts () infosecnews org>]

http://www.computerworld.com/s/article/9249690/Oracle_to_release_115_security_patches

By Chris Kanaracus
IDG News Service
July 11, 2014

Oracle is planning to release 115 security patches for vulnerabilities 
affecting a wide array of its products, including its flagship database, 
Java SE, Fusion Middleware and business applications.

The update includes fixes for 20 weaknesses in Java SE, all of which can 
be exploited by an attacker remotely, without the need for login 
credentials, Oracle said in an announcement prior to Tuesday's patch 
release.

Some 29 fixes are for Oracle's Fusion Middleware suite, with 27 able to be 
exploited over a network without the need for authentication. Affected 
middleware components include BI Publisher, GlassFish Server, HTTP Server, 
JDeveloper, WebCenter Portal and WebLogic Server.

Six other patches are for Oracle's database. Two of the vulnerabilities 
can be exploited remotely without login credentials.

[...]



--
Evident.io - Continuous Cloud Security for AWS.
Identify and mitigate risks in 5 minutes or less.
Sign up for a free trial @ https://evident.io/