Oracle's Critical Patch Update July 2024

Each quarter, Oracle releases its Critical Patch Update (CPU) - a comprehensive package of fixes aimed at addressing a wide range of security vulnerabilities. These patches are designed to combat potential threats that may linger within Oracle's products, covering everything from code-related issues to vulnerabilities in third-party components. By consistently applying these updates, you can effectively fortify the security and stability of your Oracle technologies.

This quarter's update introduces 386 new security patches across various Oracle products, addressing 268 critical vulnerabilities that could potentially be exploited remotely without authentication. It is imperative that customers promptly apply these CPU fixes to enhance the security of their systems and prioritise these patches for immediate action.

What should I do?

Below is a list of affected products and the number of identified vulnerabilities for each. If you use any of these products, you must take the necessary action to address the potential vulnerabilities in your estate. But don’t worry, DSP is here to help. Customers frequently approach us at this time to utilise our Oracle Critical Patch Update Support Service to help stay on top of their patches. So, please get in touch if this is an area of concern for you.

List of Identified products and vulnerabilities

The number in bold = the number of security patches

The numbers in (brackets) = the number of vulnerabilities

• Oracle Database Server: 8 (3)
• Oracle APEX: 1 (1)
• Oracle Essbase: 2 (0)
• Oracle GoldenGate: 1 (1)
• Oracle Construction and Engineering: 4 (2)
• Oracle E-Business Suite: 10 (2)
• Oracle Enterprise Manager (OEM): 5 (5) 
• Oracle Financial Services Applications: 60 (44)
• Oracle Fusion Middleware: 41 (32)
• Oracle Analytics: 17 (12)
• Oracle Hyperion: 3 (0)
• Oracle Java SE: 7 (7)
• Oracle JD Edwards:  8 (6)
• Oracle MySQL: 37 (11) 
• Oracle PeopleSoft: 11 (3)
• Oracle Retail Applications: 5 (4)
• Oracle Siebel CRM: 12 (11)
• Oracle Supply Chain: 7 (5)
• Oracle Systems: 2 (1)
• Oracle Utilities Applications: 2 (2)
• Oracle Virtualization: 3 (0)
  
  

While the sight of a lengthy list of vulnerabilities can be overwhelming, ensuring the security of your hardware and applications is crucial. Staying proactive and keeping up with Critical Patch Updates will help safeguard your environment. Here is the list for details on all the patches. Your system's safety is our priority.

If you would like Oracle Critical Patch Update Support, please Contact Us or book a meeting...