Oracle Critical Patch Update — October 2019
Tuesday, 15 October 2019
Exploited 1
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
-
High 8.8
CVE-2019-3010 Exploited Public exploit Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulne…EPSS 14%
Critical 1
Public exploit code 3
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
-
Unscored
CVE-2019-3025 Public exploit Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. The supported version that is affected is 5.7. Difficult t…EPSS 14%
-
Unscored
CVE-2019-2888 Public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: EJB Container). Supported versions that are affected are 10.3.6.0.0…EPSS 5.4%
-
Unscored
CVE-2019-2890 Public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0,…EPSS 37%
All vulnerabilities 137
Critical1 ShowHide
High1 ShowHide
-
High 8.8
CVE-2019-3010 Exploited Public exploit Vulnerability in the Oracle Solaris product of Oracle Systems (component: XScreenSaver). The supported version that is affected is 11. Easily exploitable vulne…EPSS 14%
Low1 ShowHide
- Low 2.4
Unscored134 ShowHide
-
Unscored
CVE-2019-3025 Public exploit Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Food and Beverage Applications. The supported version that is affected is 5.7. Difficult t…EPSS 14%
-
Unscored
CVE-2019-2888 Public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: EJB Container). Supported versions that are affected are 10.3.6.0.0…EPSS 5.4%
-
Unscored
CVE-2019-2890 Public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0,…EPSS 37%
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
- Unscored
-
Unscored
CVE-2019-2884 Vulnerability in the Oracle Retail Customer Management and Segmentation Foundation product of Oracle Retail Applications (component: Segment). The supported ve…EPSS 1.4%
- Unscored
-
Unscored
CVE-2019-2887 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web Services). Supported versions that are affected are 10.3.6.0.0,…EPSS 1.3%
-
Unscored
CVE-2019-2889 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Sample apps). The supported version that is affected is 12.2.1.3.0.…EPSS 1.2%
-
Unscored
CVE-2019-2891 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Console). Supported versions that are affected are 10.3.6.0.0, 12.1…EPSS 1.6%
-
Unscored
CVE-2019-2894 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Security). Supported versions that are affected are Java SE: 7u231, 8u221,…EPSS 3.1%
-
Unscored
CVE-2019-2895 Vulnerability in the Enterprise Manager for Exadata product of Oracle Enterprise Manager (component: Exadata Plug-In Deploy and Ins). Supported versions that a…EPSS 1.2%
-
Unscored
CVE-2019-2896 Vulnerability in the MICROS Relate CRM Software product of Oracle Retail Applications (component: Internal Operations). Supported versions that are affected ar…EPSS 1.4%
- Unscored
- Unscored
-
Unscored
CVE-2019-2900 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Analytics Actions). Supported versions tha…EPSS 1.7%
-
Unscored
CVE-2019-2901 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i…EPSS 1.3%
-
Unscored
CVE-2019-2902 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i…EPSS 1.3%
-
Unscored
CVE-2019-2903 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i…EPSS 1.3%
-
Unscored
CVE-2019-2905 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation). Supported versions that are…EPSS 2%
-
Unscored
CVE-2019-2906 Vulnerability in the BI Publisher (formerly XML Publisher) product of Oracle Fusion Middleware (component: Mobile Service). Supported versions that are affecte…EPSS 1.7%
-
Unscored
CVE-2019-2907 Vulnerability in the Oracle Web Services product of Oracle Fusion Middleware (component: SOAP with Attachments API for Java). The supported version that is aff…EPSS 1.2%
-
Unscored
CVE-2019-2909 Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c and 19c. Difficult…EPSS 1.3%
-
Unscored
CVE-2019-2910 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 5.6.45 and prior …EPSS 1.7%
-
Unscored
CVE-2019-2911 Vulnerability in the MySQL Server product of Oracle MySQL (component: Information Schema). Supported versions that are affected are 5.6.45 and prior, 5.7.27 an…EPSS 2.1%
-
Unscored
CVE-2019-2913 Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1, 18c and 19c. Easily exploitable vulnera…EPSS 1.1%
-
Unscored
CVE-2019-2914 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 5.7.27 and prior …EPSS 1.9%
-
Unscored
CVE-2019-2915 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.56 and …EPSS 1.2%
-
Unscored
CVE-2019-2920 Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). Supported versions that are affected are 5.3.13 and prior and 8.0.17…EPSS 2.3%
-
Unscored
CVE-2019-2922 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 5.6.45 and prior …EPSS 2.2%
-
Unscored
CVE-2019-2923 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 5.6.45 and prior …EPSS 2.2%
-
Unscored
CVE-2019-2924 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 5.6.45 and prior …EPSS 2.2%
-
Unscored
CVE-2019-2925 Vulnerability in the Oracle Workflow product of Oracle E-Business Suite (component: Worklist). Supported versions that are affected are 12.1.3 and 12.2.3-12.2.…EPSS 1.2%
- Unscored
-
Unscored
CVE-2019-2927 Vulnerability in the Hyperion Data Relationship Management product of Oracle Hyperion (component: Access and Security). The supported version that is affected …EPSS 1.1%
-
Unscored
CVE-2019-2929 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.56 and 8.57…EPSS 1%
-
Unscored
CVE-2019-2930 Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (component: Wireless). Supported versions that are affected are 12.1.1-12.1.3 and …EPSS 1.1%
-
Unscored
CVE-2019-2931 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Portal). Supported versions that are affected are 8.56 and 8.57…EPSS 1%
-
Unscored
CVE-2019-2932 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Tree Manager). Supported versions that are affected are 8.56 an…EPSS 1.3%
-
Unscored
CVE-2019-2933 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221…EPSS 2.3%
-
Unscored
CVE-2019-2934 Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9…EPSS 1.4%
-
Unscored
CVE-2019-2935 Vulnerability in the Siebel UI Framework product of Oracle Siebel CRM (component: EAI). Supported versions that are affected are 19.8 and prior. Easily exploit…EPSS 1.6%
-
Unscored
CVE-2019-2936 Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9…EPSS 1.3%
-
Unscored
CVE-2019-2937 Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9…EPSS 1.6%
-
Unscored
CVE-2019-2938 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.27 and prior and 8.0.17 and prior. …EPSS 3%
-
Unscored
CVE-2019-2939 Vulnerability in the Core RDBMS component of Oracle Database Server. Supported versions that are affected are 12.2.0.1, 18c and 19c. Easily exploitable vulnera…EPSS 1.1%
- Unscored
- Unscored
-
Unscored
CVE-2019-2942 Vulnerability in the Oracle Advanced Outbound Telephony product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected ar…EPSS 1.4%
-
Unscored
CVE-2019-2943 Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Studio). The supported version that is affected is 12.2.1.3.0. Easi…EPSS 1.5%
- Unscored
-
Unscored
CVE-2019-2945 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u22…EPSS 3.3%
-
Unscored
CVE-2019-2946 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 5.7.27 and prior and 8.0.17 and pri…EPSS 2.7%
-
Unscored
CVE-2019-2947 Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9…EPSS 1.2%
-
Unscored
CVE-2019-2948 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.26 and prior and 8.0.16 …EPSS 2.3%
-
Unscored
CVE-2019-2949 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Kerberos). Supported versions that are affected are Java SE: 7u231, 8u221,…EPSS 3.6%
-
Unscored
CVE-2019-2950 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.16 and prior. Easily exp…EPSS 3.1%
-
Unscored
CVE-2019-2951 Vulnerability in the PeopleSoft Enterprise HCM Human Resources product of Oracle PeopleSoft (component: US Federal Specific). The supported version that is aff…EPSS 1.1%
-
Unscored
CVE-2019-2952 Vulnerability in the Oracle Hospitality Reporting and Analytics component of Oracle Food and Beverage Applications. The supported version that is affected is 9…EPSS 1.2%
-
Unscored
CVE-2019-2953 Vulnerability in the Oracle Hospitality Cruise Dining Room Management product of Oracle Hospitality Applications (component: Web Service). The supported versio…EPSS 1.2%
- Unscored
- Unscored
-
Unscored
CVE-2019-2956 Vulnerability in the Core RDBMS (jackson-databind) component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 12.2.0.1, 18c and 19…EPSS 1.1%
-
Unscored
CVE-2019-2957 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.17 and prior.…EPSS 1.8%
-
Unscored
CVE-2019-2958 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java SE: 7u231, 8u221…EPSS 2.6%
- Unscored
-
Unscored
CVE-2019-2960 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.27 and prior and 8.0.1…EPSS 2.6%
- Unscored
-
Unscored
CVE-2019-2962 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.…EPSS 3.5%
-
Unscored
CVE-2019-2963 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vu…EPSS 2.6%
-
Unscored
CVE-2019-2964 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Concurrency). Supported versions that are affected are Java SE: 7u231, 8u2…EPSS 3.5%
-
Unscored
CVE-2019-2965 Vulnerability in the Siebel Core - DB Deployment and Configuration product of Oracle Siebel CRM (component: Install - Configuration). Supported versions that a…EPSS 1.9%
-
Unscored
CVE-2019-2966 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.17 and prior. Easily exp…EPSS 2.7%
-
Unscored
CVE-2019-2967 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.17 and prior. Easily exp…EPSS 2.7%
-
Unscored
CVE-2019-2968 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.17 and prior. Easily exploitable vu…EPSS 2.6%
- Unscored
-
Unscored
CVE-2019-2970 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i…EPSS 1.4%
-
Unscored
CVE-2019-2971 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i…EPSS 1.4%
-
Unscored
CVE-2019-2972 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i…EPSS 1.4%
-
Unscored
CVE-2019-2973 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.…EPSS 3.7%
-
Unscored
CVE-2019-2974 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.6.45 and prior, 5.7.27 and…EPSS 3.8%
-
Unscored
CVE-2019-2975 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Scripting). Supported versions that are affected are Java SE: 8u221, 11.0.…EPSS 3.3%
-
Unscored
CVE-2019-2976 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported ver…EPSS 1.1%
-
Unscored
CVE-2019-2977 Vulnerability in the Java SE product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to expl…EPSS 2.6%
-
Unscored
CVE-2019-2978 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u22…EPSS 3.3%
-
Unscored
CVE-2019-2979 Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: Payments). Supported versions that are affect…EPSS 1.1%
-
Unscored
CVE-2019-2980 Vulnerability in the Oracle FLEXCUBE Direct Banking product of Oracle Financial Services Applications (component: eMail). Supported versions that are affected …EPSS 1.7%
-
Unscored
CVE-2019-2981 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: JAXP). Supported versions that are affected are Java SE: 7u231, 8u221, 11.…EPSS 3.7%
-
Unscored
CVE-2019-2982 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.17 and prior. Easily exp…EPSS 2.6%
-
Unscored
CVE-2019-2983 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Serialization). Supported versions that are affected are Java SE: 7u231, 8…EPSS 3.7%
- Unscored
-
Unscored
CVE-2019-2985 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Fluid Core). Supported versions that are affected are 8.56 and …EPSS 1.2%
-
Unscored
CVE-2019-2986 Vulnerability in the Oracle GraalVM Enterprise Edition product of Oracle GraalVM (component: LLVM Interpreter). The supported version that is affected is 19.2.…EPSS 1.3%
-
Unscored
CVE-2019-2987 Vulnerability in the Java SE product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 11.0.4 and 13. Difficult to exploit v…EPSS 3.5%
-
Unscored
CVE-2019-2988 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.…EPSS 3.3%
-
Unscored
CVE-2019-2989 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Networking). Supported versions that are affected are Java SE: 7u231, 8u22…EPSS 3.2%
-
Unscored
CVE-2019-2990 Vulnerability in the Oracle iStore product of Oracle E-Business Suite (component: Order Tracker). Supported versions that are affected are 12.1.1-12.1.3 and 12…EPSS 1.3%
-
Unscored
CVE-2019-2991 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.017 and prior. Easily expl…EPSS 2.4%
-
Unscored
CVE-2019-2992 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: 2D). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.…EPSS 3.5%
-
Unscored
CVE-2019-2993 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API). Supported versions that are affected are 5.7.27 and prior and 8.0.17 and …EPSS 2.2%
-
Unscored
CVE-2019-2994 Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1…EPSS 1.5%
-
Unscored
CVE-2019-2995 Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1…EPSS 1.5%
-
Unscored
CVE-2019-2996 Vulnerability in the Java SE, Java SE Embedded product of Oracle Java SE (component: Deployment). The supported version that is affected is Java SE: 8u221; Jav…EPSS 2.2%
-
Unscored
CVE-2019-2997 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.17 and prior. Easily exploitab…EPSS 2.6%
-
Unscored
CVE-2019-2998 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.17 and prior. Easily exp…EPSS 2.6%
-
Unscored
CVE-2019-2999 Vulnerability in the Java SE product of Oracle Java SE (component: Javadoc). Supported versions that are affected are Java SE: 7u231, 8u221, 11.0.4 and 13. Dif…EPSS 2.6%
-
Unscored
CVE-2019-3000 Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.1.1…EPSS 1.5%
-
Unscored
CVE-2019-3001 Vulnerability in the PeopleSoft Enterprise SCM eProcurement product of Oracle PeopleSoft (component: eProcurement). The supported version that is affected is 9…EPSS 1.5%
- Unscored
-
Unscored
CVE-2019-3003 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.16 and prior. Easily exploitable vu…EPSS 2.3%
-
Unscored
CVE-2019-3004 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.17 and prior. Easily exploi…EPSS 2.7%
- Unscored
- Unscored
-
Unscored
CVE-2019-3009 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Connection). Supported versions that are affected are 8.0.17 and prior. Difficult…EPSS 2.5%
-
Unscored
CVE-2019-3011 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: C API). Supported versions that are affected are 8.0.17 and prior. Easily exploit…EPSS 2.7%
-
Unscored
CVE-2019-3012 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: BI Platform Security). Supported versions …EPSS 1.7%
-
Unscored
CVE-2019-3014 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Performance Monitor). Supported versions that are affected are …EPSS 1%
- Unscored
- Unscored
-
Unscored
CVE-2019-3018 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.17 and prior. Difficult to exploit …EPSS 2%
- Unscored
-
Unscored
CVE-2019-3020 Vulnerability in the Primavera P6 Enterprise Project Portfolio Management product of Oracle Construction and Engineering (component: Web Access). Supported ver…EPSS 1.5%
- Unscored
-
Unscored
CVE-2019-3022 Vulnerability in the Oracle Content Manager product of Oracle E-Business Suite (component: Content). Supported versions that are affected are 12.1.1-12.1.3 and…EPSS 1.1%
-
Unscored
CVE-2019-3023 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component: Stylesheet). Supported versions that are affected are 8.56 and …EPSS 1.1%
-
Unscored
CVE-2019-3024 Vulnerability in the Oracle Installed Base product of Oracle E-Business Suite (component: Engineering Change Order). Supported versions that are affected are 1…EPSS 1.1%
- Unscored
-
Unscored
CVE-2019-3027 Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Login Help). Supported versions that are affected are 12.…EPSS 1.6%
- Unscored
- Unscored