Oracle Critical Patch Update — January 2023
Tuesday, 17 January 2023
Exploited 1
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
-
High 7.5
CVE-2023-21839 Exploited Public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.…EPSS 100%
Critical 1
- Critical 9.8
Public exploit code 2
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- High 7.5
-
Medium 4.9
CVE-2023-21887 Public exploit Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are 8.0.31 and prior. Easily exploitab…EPSS 43%
All vulnerabilities 74
Critical1 ShowHide
- Critical 9.8
High24 ShowHide
-
High 7.5
CVE-2023-21839 Exploited Public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.…EPSS 100%
- High 8.8
- High 8.8
- High 8.8
- High 8.1
- High 8.1
-
High 8.1
CVE-2023-21886 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 6.1.42 and prio…EPSS 1.2%
- High 7.6
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.3
Medium44 ShowHide
- Medium 6.5
- Medium 6.3
- Medium 6.3
-
Medium 5.9
CVE-2023-21875 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.31 and prior.…EPSS 1.5%
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.3
-
Medium 5.3
CVE-2023-21830 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Serialization). Supported versions that are affect…EPSS 1.1%
- Medium 5.3
-
Medium 5.3
CVE-2023-21835 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Or…EPSS 1.9%
-
Medium 4.9
CVE-2023-21887 Public exploit Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: GIS). Supported versions that are affected are 8.0.31 and prior. Easily exploitab…EPSS 43%
- Medium 4.9
-
Medium 4.9
CVE-2023-21840 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected are 5.7.40 and prior. Easily exploitabl…EPSS 1.1%
- Medium 4.9
-
Medium 4.9
CVE-2023-21864 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exp…EPSS 1.2%
-
Medium 4.9
CVE-2023-21865 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exp…EPSS 1.2%
-
Medium 4.9
CVE-2023-21866 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.28 and prior. Easily exp…EPSS 1.1%
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.4
- Medium 4.4
- Medium 4.4
- Medium 4.3
- Medium 4.3
- Medium 4.3
- Medium 4.0
Low5 ShowHide
- Low 3.8
- Low 3.8
-
Low 3.7
CVE-2023-21843 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Sound). Supported versions that are affected are O…EPSS 1.4%
-
Low 2.7
CVE-2023-21874 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.30 and prior. Easil…EPSS 1%
- Low 2.7