Oracle Critical Patch Update — October 2021
Tuesday, 19 October 2021
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Critical 2
-
Critical 10.0
CVE-2021-35652 Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affected are Prior to …EPSS 1.9%
-
Critical 9.8
CVE-2021-35617 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container). Supported versions that are affected are 12.1…EPSS 2.1%
Public exploit code 3
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- Medium 5.9 EPSS 7.5%
-
Medium 5.4
CVE-2021-35616 Public exploit Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure). The supported version that is affected is …EPSS 28%
-
Low 2.7
CVE-2021-35576 Public exploit Vulnerability in the Oracle Database Enterprise Edition Unified Audit component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 1…EPSS 1.4%
All vulnerabilities 137
Critical2 ShowHide
-
Critical 10.0
CVE-2021-35652 Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affected are Prior to …EPSS 1.9%
-
Critical 9.8
CVE-2021-35617 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Coherence Container). Supported versions that are affected are 12.1…EPSS 2.1%
High34 ShowHide
-
High 8.8
CVE-2021-2137 Vulnerability in the Enterprise Manager Base Platform product of Oracle Enterprise Manager (component: Policy Framework). Supported versions that are affected …EPSS 1.1%
-
High 8.5
CVE-2021-35651 Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affected are Prior to …EPSS 1%
-
High 8.3
CVE-2021-2461 Vulnerability in the Oracle Communications Interactive Session Recorder product of Oracle Communications (component: Provision API). The supported version that…EPSS 1.1%
- High 8.2
-
High 8.1
CVE-2021-2474 Vulnerability in the Oracle Web Analytics product of Oracle E-Business Suite (component: Admin). Supported versions that are affected are 12.1.1-12.1.3. Easily…EPSS 1.2%
-
High 8.1
CVE-2021-2482 Vulnerability in the Oracle Payables product of Oracle E-Business Suite (component: Invoice Approvals). Supported versions that are affected are 12.1.1-12.1.3.…EPSS 1.2%
- High 8.1
- High 8.1
- High 8.1
-
High 8.1
CVE-2021-35536 Vulnerability in the Oracle Deal Management product of Oracle E-Business Suite (component: Miscellaneous). Supported versions that are affected are 12.1.1-12.1…EPSS 1.1%
-
High 8.1
CVE-2021-35543 Vulnerability in the PeopleSoft Enterprise CC Common Application Objects product of Oracle PeopleSoft (component: Activity Guide Composer). The supported versi…EPSS 1.1%
-
High 8.1
CVE-2021-35562 Vulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component: Work Provider Site Level Administration). Supported versions th…EPSS 1.3%
-
High 8.1
CVE-2021-35563 Vulnerability in the Oracle Shipping Execution product of Oracle E-Business Suite (component: Workflow Events). Supported versions that are affected are 12.2.6…EPSS 1.6%
-
High 8.1
CVE-2021-35566 Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.1.3 a…EPSS 1.3%
-
High 8.1
CVE-2021-35570 Vulnerability in the Oracle Mobile Field Service product of Oracle E-Business Suite (component: Admin UI). Supported versions that are affected are 12.1.1-12.1…EPSS 1.3%
-
High 8.1
CVE-2021-35585 Vulnerability in the Oracle Incentive Compensation product of Oracle E-Business Suite (component: User Interface). Supported versions that are affected are 12.…EPSS 1%
- High 7.8
-
High 7.7
CVE-2021-35653 Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affected are Prior to …EPSS 1.2%
-
High 7.5
CVE-2021-35560 Vulnerability in the Java SE product of Oracle Java SE (component: Deployment). The supported version that is affected is Java SE: 8u301. Difficult to exploit …EPSS 4.8%
-
High 7.5
CVE-2021-35572 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i…EPSS 1.5%
-
High 7.5
CVE-2021-35573 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i…EPSS 1.5%
-
High 7.5
CVE-2021-35574 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i…EPSS 2%
-
High 7.5
CVE-2021-35583 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Windows). Supported versions that are affected are 8.0.25 and prior. Easily explo…EPSS 3.1%
-
High 7.5
CVE-2021-35620 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 10.3.6.0.0, 12.1.3.…EPSS 1.5%
-
High 7.5
CVE-2021-35654 Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affected are Prior to …EPSS 1.6%
-
High 7.5
CVE-2021-35656 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i…EPSS 1.5%
-
High 7.5
CVE-2021-35657 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i…EPSS 1.5%
-
High 7.5
CVE-2021-35658 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i…EPSS 1.5%
-
High 7.5
CVE-2021-35659 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i…EPSS 1.3%
-
High 7.5
CVE-2021-35660 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i…EPSS 1.5%
-
High 7.5
CVE-2021-35661 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i…EPSS 1.5%
-
High 7.5
CVE-2021-35662 Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Filters). The supported version that is affected i…EPSS 1.5%
-
High 7.1
CVE-2021-35610 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 2.3%
- High 7.1
Medium90 ShowHide
-
Medium 6.8
CVE-2021-2414 Vulnerability in the Oracle Communications Session Border Controller product of Oracle Communications (component: Routing). Supported versions that are affecte…EPSS 1.2%
-
Medium 6.8
CVE-2021-35567 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Java…EPSS 2.9%
- Medium 6.7
- Medium 6.7
-
Medium 6.5
CVE-2021-2481 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 2.4%
- Medium 6.5
- Medium 6.5
-
Medium 6.5
CVE-2021-35597 Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vul…EPSS 2.6%
-
Medium 6.5
CVE-2021-35607 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitab…EPSS 2.4%
- Medium 6.5
-
Medium 6.3
CVE-2021-35590 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and…EPSS 88%
-
Medium 6.3
CVE-2021-35592 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.5.23 and prior, 7.6.19 and…EPSS 52%
-
Medium 6.3
CVE-2021-35593 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and…EPSS 51%
-
Medium 6.3
CVE-2021-35594 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and…EPSS 51%
-
Medium 6.3
CVE-2021-35598 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and…EPSS 51%
-
Medium 6.3
CVE-2021-35621 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and…EPSS 50%
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.0
- Medium 5.9 EPSS 7.5%
-
Medium 5.9
CVE-2021-35550 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: …EPSS 7.4%
-
Medium 5.9
CVE-2021-35666 Vulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL Module). The supported version that is affected is 11.1.1.9.0. Dif…EPSS 1.2%
- Medium 5.7
- Medium 5.7
- Medium 5.5
- Medium 5.5
-
Medium 5.5
CVE-2021-35604 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.35 and prior and 8.0.26 and prior. …EPSS 2.7%
-
Medium 5.5
CVE-2021-35612 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 1.7%
-
Medium 5.4
CVE-2021-35616 Public exploit Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: UI Infrastructure). The supported version that is affected is …EPSS 28%
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
-
Medium 5.3
CVE-2021-2476 Vulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component: Authentication). The supported version that is affected is 6.4…EPSS 1.2%
-
Medium 5.3
CVE-2021-2477 Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component: Session Management). Supported versions that are affected are…EPSS 1.5%
-
Medium 5.3
CVE-2021-35552 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Diagnostics). Supported versions that are affected are 12.2.1.3.0, …EPSS 1.1%
- Medium 5.3
-
Medium 5.3
CVE-2021-35556 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE:…EPSS 8.4%
-
Medium 5.3
CVE-2021-35559 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE:…EPSS 16%
-
Medium 5.3
CVE-2021-35561 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Utility). Supported versions that are affected are Java S…EPSS 6.9%
-
Medium 5.3
CVE-2021-35564 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Keytool). Supported versions that are affected are Java S…EPSS 5.6%
-
Medium 5.3
CVE-2021-35565 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: …EPSS 7.4%
-
Medium 5.3
CVE-2021-35578 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: …EPSS 6.7%
-
Medium 5.3
CVE-2021-35586 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: ImageIO). Supported versions that are affected are Java S…EPSS 6.8%
-
Medium 5.3
CVE-2021-35608 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.26 and pr…EPSS 2.2%
-
Medium 5.3
CVE-2021-35655 Vulnerability in the Essbase Administration Services product of Oracle Essbase (component: EAS Console). The supported versions that are affected are Prior to …EPSS 1.2%
-
Medium 5.0
CVE-2021-35602 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.26 and prior. Difficult to…EPSS 1.9%
- Medium 4.9
-
Medium 4.9
CVE-2021-2478 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitab…EPSS 3.3%
-
Medium 4.9
CVE-2021-2479 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitab…EPSS 2.6%
-
Medium 4.9
CVE-2021-35537 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.25 and prior. Easily exploitab…EPSS 1.7%
-
Medium 4.9
CVE-2021-35546 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 8.0.26 and prior. Easily e…EPSS 2.6%
-
Medium 4.9
CVE-2021-35569 Vulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component: Diagnostics). Supported versions that are affected are 12.1.3 a…EPSS 1.1%
-
Medium 4.9
CVE-2021-35575 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 2.1%
-
Medium 4.9
CVE-2021-35577 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 2.5%
-
Medium 4.9
CVE-2021-35591 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.26 and prior. Easily exploitab…EPSS 2.5%
-
Medium 4.9
CVE-2021-35596 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Error Handling). Supported versions that are affected are 8.0.26 and prior. Easil…EPSS 2.5%
-
Medium 4.9
CVE-2021-35622 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.26 and prior.…EPSS 1.3%
-
Medium 4.9
CVE-2021-35624 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.35 and prior …EPSS 1.4%
-
Medium 4.9
CVE-2021-35626 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 1.8%
-
Medium 4.9
CVE-2021-35627 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 1.8%
-
Medium 4.9
CVE-2021-35628 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 1.9%
-
Medium 4.9
CVE-2021-35629 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.25 and prior. Easily exp…EPSS 1.7%
-
Medium 4.9
CVE-2021-35630 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Options). Supported versions that are affected are 8.0.26 and prior. Easily explo…EPSS 1.5%
-
Medium 4.9
CVE-2021-35631 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are 8.0.26 and prior. Easily exploitab…EPSS 1.9%
-
Medium 4.9
CVE-2021-35634 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 1.9%
-
Medium 4.9
CVE-2021-35635 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 1.9%
-
Medium 4.9
CVE-2021-35636 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 1.9%
-
Medium 4.9
CVE-2021-35637 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 8.0.26 and prior. Easily exploitabl…EPSS 2%
-
Medium 4.9
CVE-2021-35638 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 2%
-
Medium 4.9
CVE-2021-35639 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.26 and prior. Eas…EPSS 1.7%
-
Medium 4.9
CVE-2021-35641 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 1.9%
-
Medium 4.9
CVE-2021-35642 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 1.9%
-
Medium 4.9
CVE-2021-35643 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 1.9%
-
Medium 4.9
CVE-2021-35644 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 1.9%
-
Medium 4.9
CVE-2021-35645 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 1.9%
-
Medium 4.9
CVE-2021-35646 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 1.9%
-
Medium 4.9
CVE-2021-35647 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.26 and prior. Easily exp…EPSS 1.9%
-
Medium 4.9
CVE-2021-35648 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: FTS). Supported versions that are affected are 8.0.26 and prior. Easily exploitab…EPSS 1.9%
- Medium 4.7
- Medium 4.6
- Medium 4.4
- Medium 4.4
- Medium 4.4
- Medium 4.3
- Medium 4.3
- Medium 4.3
-
Medium 4.3
CVE-2021-35611 Vulnerability in the Oracle Sales Offline product of Oracle E-Business Suite (component: Offline Template). Supported versions that are affected are 12.1.1-12.…EPSS 1.2%
Low11 ShowHide
- Low 3.9
- Low 3.7
-
Low 3.7
CVE-2021-35603 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Java SE: …EPSS 4.4%
-
Low 3.7
CVE-2021-35613 Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.26 and prior. Difficult …EPSS 1.5%
-
Low 3.1
CVE-2021-35588 Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are Java S…EPSS 3.9%
-
Low 2.7
CVE-2021-35576 Public exploit Vulnerability in the Oracle Database Enterprise Edition Unified Audit component of Oracle Database Server. Supported versions that are affected are 12.1.0.2, 1…EPSS 1.4%
-
Low 2.7
CVE-2021-35623 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Roles). Supported versions that are affected are 8.0.26 and prior. Easi…EPSS 1.6%
-
Low 2.7
CVE-2021-35625 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.26 and prior.…EPSS 1.6%
-
Low 2.7
CVE-2021-35633 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Logging). Supported versions that are affected are 8.0.26 and prior. Easily explo…EPSS 1.5%
-
Low 2.7
CVE-2021-35640 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.26 and prior. Easily exploitab…EPSS 1.3%
- Low 1.8