Oracle Patch Tuesday, October 2023 Security Update Review | Qualys

Summary: Oracle released its fourth quarterly Critical Patch Update for 2023, covering 387 security vulnerabilities, with Oracle Financial Services Applications receiving the most at 103 patches (26% of the total), followed by Oracle Communications with 91 and Oracle Fusion Middleware with 46. Of the 387 patches, 311 (80%) address non-Oracle CVEs in third-party and open-source components included in Oracle product distributions.
Key Takeaway: In Oracle Financial Services Applications alone, 49 of the 103 vulnerabilities are remotely exploitable without authentication, and CVE-2023-22946, CVE-2022-1471, and CVE-2023-20873 carry CVSS scores of 9.9 and 9.8 that a remote attacker can trigger in a low-complexity network attack.

Read the original at Qualys Blog ↗