Oracle Critical Patch Update — April 2023
Tuesday, 18 April 2023
- Vulnerabilities
- 91
- Critical
- 0
- High
- 14
- Zero-days
- 0
- Public exploit
- 4
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Public exploit code 4
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- High 7.8
-
High 7.5
CVE-2023-21931 Public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.…EPSS 82%
-
Medium 5.3
CVE-2023-21939 Public exploit Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are O…EPSS 2.5%
-
Medium 5.3
CVE-2023-21971 Public exploit Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.32 and prior. Difficult to…EPSS 1.5%
All vulnerabilities 91
High14 ShowHide
- High 8.3
- High 8.2
- High 7.8
- High 7.8
- High 7.7
-
High 7.5
CVE-2023-21931 Public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.3.0, 12.2.1.…EPSS 82%
-
High 7.5
CVE-2023-21912 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 5.7.41 and prior …EPSS 1.2%
- High 7.5
- High 7.5
- High 7.5
-
High 7.4
CVE-2023-21930 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Or…EPSS 1.3%
-
High 7.2
CVE-2023-21932 Vulnerability in the Oracle Hospitality OPERA 5 Property Services product of Oracle Hospitality Applications (component: OXI). The supported version that is af…EPSS 45%
- High 7.1
- High 7.0
Medium68 ShowHide
- Medium 6.8
- Medium 6.8
- Medium 6.8
- Medium 6.7
- Medium 6.5
- Medium 6.5
-
Medium 6.5
CVE-2023-21946 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily exp…EPSS 1.5%
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.0
- Medium 6.0
- Medium 6.0
- Medium 6.0
- Medium 5.9
-
Medium 5.9
CVE-2023-21954 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versions that are affected are…EPSS 1.4%
-
Medium 5.9
CVE-2023-21967 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions that are affected are Or…EPSS 1.5%
- Medium 5.7
- Medium 5.7
- Medium 5.7
- Medium 5.7
- Medium 5.6
- Medium 5.5
-
Medium 5.5
CVE-2023-21929 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.32 and prior. Easily exploitab…EPSS 1.3%
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
-
Medium 5.3
CVE-2023-21939 Public exploit Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are O…EPSS 2.5%
-
Medium 5.3
CVE-2023-21971 Public exploit Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.32 and prior. Difficult to…EPSS 1.5%
- Medium 5.3
- Medium 5.3
- Medium 5.3
- Medium 5.3
- Medium 5.3
- Medium 5.3
- Medium 5.3
-
Medium 4.9
CVE-2023-21911 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vu…EPSS 1.4%
-
Medium 4.9
CVE-2023-21913 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.31 and prior. Easily exp…EPSS 1.1%
-
Medium 4.9
CVE-2023-21917 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.30 and prior. Easily exp…EPSS 1.1%
-
Medium 4.9
CVE-2023-21919 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.32 and prior. Easily exploitab…EPSS 1.5%
-
Medium 4.9
CVE-2023-21920 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily exp…EPSS 1.5%
-
Medium 4.9
CVE-2023-21933 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.32 and prior. Easily exploitab…EPSS 1.4%
-
Medium 4.9
CVE-2023-21935 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily exp…EPSS 1.4%
-
Medium 4.9
CVE-2023-21945 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily exp…EPSS 1.4%
-
Medium 4.9
CVE-2023-21953 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). Supported versions that are affected are 8.0.32 and prior. Easily exp…EPSS 1.5%
-
Medium 4.9
CVE-2023-21955 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Partition). Supported versions that are affected are 8.0.32 and prior. Easily exp…EPSS 1.4%
-
Medium 4.9
CVE-2023-21962 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.32 and prior. …EPSS 1.4%
-
Medium 4.9
CVE-2023-21966 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: JSON). Supported versions that are affected are 8.0.32 and prior. Easily exploita…EPSS 1.1%
-
Medium 4.9
CVE-2023-21972 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.32 and prior. Easily exploitab…EPSS 1.1%
-
Medium 4.9
CVE-2023-21976 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily exp…EPSS 1.1%
-
Medium 4.9
CVE-2023-21977 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily exp…EPSS 1.1%
- Medium 4.9
-
Medium 4.9
CVE-2023-21982 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.32 and prior. Easily exp…EPSS 1.1%
- Medium 4.6
- Medium 4.6
- Medium 4.6
- Medium 4.6
-
Medium 4.4
CVE-2023-21940 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.32 and prior. …EPSS 1.3%
-
Medium 4.4
CVE-2023-21947 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.32 and prior. …EPSS 1.4%
- Medium 4.3
- Medium 4.3
- Medium 4.3
- Medium 4.3
- Medium 4.3
Low9 ShowHide
- Low 3.8
-
Low 3.7
CVE-2023-21937 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Networking). Supported versions that are affected …EPSS 1.2%
-
Low 3.7
CVE-2023-21938 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected a…EPSS 1.2%
-
Low 3.7
CVE-2023-21968 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected a…EPSS 1%
- Low 3.6
- Low 3.3
- Low 3.2
- Low 2.7
- Low 1.8