Oracle's Critical Patch Update April 2023

Oracle issues a Critical Patch Update (CPU) every quarter that includes a set of fixes for multiple security vulnerabilities. The patches address potential security threats in Oracle's products, including both code and third-party components. 

This quarter's update includes 433 new security patches across a range of Oracle products, as well as 298 vulnerabilities that are particularly concerning because they may be remotely exploitable without authentication (over a network without requiring user credentials to access); therefore, we strongly recommend customers to apply CPU fixes as soon as possible and prioritise these patches.

What should I do?

Below you will find a list of affected products and the number of identified vulnerabilities for each. If you use any of these products, it’s essential you take the necessary action to address the potential vulnerabilities in your estate. But don’t worry, DSP is here to help. Organisations frequently approach us at this time to utilise our Oracle Consultancy services and stay on top of their patches. So, please get in touch if this is an area of concern for you.

List of Identified products and vulnerabilities:

The number in bold = the number of security patches

The numbers in (brackets) = the number of vulnerabilities

• Oracle Database Products: 23 (11)
• Oracle E-Business Suite: 4
• Oracle Enterprise Manager (OEM): 4 (3)
• Oracle Financial Services Applications: 76 (59) 
• Oracle Fusion Middleware: 49 (44)
• Oracle Hyperion: 2 (1)
• Oracle Insurance Applications: 9 (9)
• Oracle Java SE: 8 (7) 
• Oracle JD Edwards: 14 (8)
• Oracle MySQL: 34 (11) 
• Oracle PeopleSoft: 10 (8)
• Oracle Retail Applications: 22 (16)
• Oracle Siebel: 6 (3)
• Oracle Supply Chain: 2 (2)
• Oracle Systems: 6
• Oracle Support Tools: 6
• Oracle Utilities Applications: 4 (3)
• Oracle Virtualisation: 11 (1) 

It can be daunting to see a long list of vulnerabilities, but it's important that your hardware and applications remain secure. As long as you stay on top of these Critical Patch Updates, your environment will be safe. For full details of all the patches, click here. 

If you would like any support or advice on patching or securing your estate please get in touch with our experts, or book a meeting...