Oracle Critical Patch Update — April 2021

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 15

• Critical 10.0
  CVE-2021-2177 Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Gateway). The supported version that is affected is 5.6. Easily …
  EPSS 2.5%
• Critical 10.0
  CVE-2021-2244 Vulnerability in the Hyperion Analytic Provider Services product of Oracle Hyperion (component: JAPI) and Essbase Analytic Provider Services product of Oracle …
  EPSS 1.8%
• Critical 10.0
  CVE-2021-2248 Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Server). The supported version that is affected is 5.6. Easily e…
  EPSS 2.5%
• Critical 10.0
  CVE-2021-2256 Vulnerability in the Oracle Storage Cloud Software Appliance product of Oracle Storage Gateway (component: Management Console). The supported version that is a…
  EPSS 1.7%
• Critical 10.0
  CVE-2021-2317 Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). The supported version that …
  EPSS 1.9%
• Critical 9.8
  CVE-2021-2302 Public exploit Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware (component: OPSS). Supported versions that are affected are 11.1.1.9…
  EPSS 5.7%
• Critical 9.8
  CVE-2021-2135 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container). Supported versions that are affected are 12.2…
  EPSS 8.4%
• Critical 9.8
  CVE-2021-2136 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.1.3.0.0, 12.2.1.…
  EPSS 2.2%
• Critical 9.6
  CVE-2021-2221 Vulnerability in the Oracle Secure Global Desktop product of Oracle Virtualization (component: Client). The supported version that is affected is 5.6. Easily e…
  EPSS 2%
• Critical 9.1
  CVE-2021-2200 Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Home page). The supported version that is affected is 12.2.10…
  EPSS 1.2%
• Critical 9.1
  CVE-2021-2205 Vulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Marketing Administration). Supported versions that are affected are 12.2.7…
  EPSS 1.3%
• Critical 9.1
  CVE-2021-2253 Vulnerability in the Oracle Advanced Supply Chain Planning product of Oracle Supply Chain (component: Core). Supported versions that are affected are 12.1 and …
  EPSS 1.5%
• Critical 9.1
  CVE-2021-2318 Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). The supported version that …
  EPSS 1.1%
• Critical 9.1
  CVE-2021-2319 Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). The supported version that …
  EPSS 1.1%
• Critical 9.1
  CVE-2021-2320 Vulnerability in the Oracle Cloud Infrastructure Storage Gateway product of Oracle Storage Gateway (component: Management Console). The supported version that …
  EPSS 1.1%

All vulnerabilities 178