Oracle Critical Patch Update — October 2023
Tuesday, 17 October 2023
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Critical 3
- Critical 9.8
- Critical 9.8
- Critical 9.8
Public exploit code 3
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- High 8.2
- Medium 4.9
- Low 2.4
All vulnerabilities 73
Critical3 ShowHide
- Critical 9.8
- Critical 9.8
- Critical 9.8
High11 ShowHide
- High 8.8
- High 8.8
- High 8.3
- High 8.2
- High 8.2
- High 8.1
- High 7.9
- High 7.9
- High 7.5
- High 7.5
- High 7.5
Medium54 ShowHide
-
Medium 6.5
CVE-2023-22059 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0. …EPSS 1.1%
-
Medium 6.5
CVE-2023-22079 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior. Easily exp…EPSS 1.1%
- Medium 6.5
- Medium 6.5
-
Medium 6.5
CVE-2023-22095 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). The supported version that is affected is 8.1.0. Easily exploitable v…EPSS 1.1%
- Medium 6.5
- Medium 6.5
- Medium 6.3
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 5.9
- Medium 5.9
- Medium 5.9
- Medium 5.9
- Medium 5.5
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
-
Medium 5.3
CVE-2023-22067 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: CORBA). Supported versions that are affected are O…EPSS 1.1%
-
Medium 5.3
CVE-2023-22081 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: JSSE). Supported versions …EPSS 1.6%
- Medium 5.3
- Medium 4.9
-
Medium 4.9
CVE-2023-22015 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.42 and prior and 8.0.31 …EPSS 1%
-
Medium 4.9
CVE-2023-22026 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.42 and prior and 8.0.31 …EPSS 1%
-
Medium 4.9
CVE-2023-22028 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.43 and prior and 8.0.31 …EPSS 1%
-
Medium 4.9
CVE-2023-22032 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0. …EPSS 1.1%
-
Medium 4.9
CVE-2023-22064 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior. Easily exp…EPSS 1%
-
Medium 4.9
CVE-2023-22065 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.33 and prior. Easily exp…EPSS 1.1%
-
Medium 4.9
CVE-2023-22066 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily expl…EPSS 1.1%
-
Medium 4.9
CVE-2023-22068 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily expl…EPSS 1.1%
-
Medium 4.9
CVE-2023-22070 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0. …EPSS 1%
-
Medium 4.9
CVE-2023-22078 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0. …EPSS 1.1%
-
Medium 4.9
CVE-2023-22084 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 5.7.43 and prior, 8.0.34 and prior and …EPSS 2.1%
-
Medium 4.9
CVE-2023-22092 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior. Easily exp…EPSS 1.1%
-
Medium 4.9
CVE-2023-22097 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily expl…EPSS 1.1%
-
Medium 4.9
CVE-2023-22103 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0. …EPSS 1.2%
-
Medium 4.9
CVE-2023-22104 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.32 and prior. Easily exploitable vu…EPSS 1.1%
-
Medium 4.9
CVE-2023-22110 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.33 and prior. Easily exp…EPSS 1.1%
-
Medium 4.9
CVE-2023-22111 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 8.0.33 and prior. Easily exploitab…EPSS 1.1%
-
Medium 4.9
CVE-2023-22112 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior. Easily exp…EPSS 1.1%
-
Medium 4.9
CVE-2023-22114 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily expl…EPSS 1.2%
-
Medium 4.9
CVE-2023-22115 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.33 and prior. Easily exploitab…EPSS 1%
- Medium 4.8
- Medium 4.6
- Medium 4.3
- Medium 4.3
- Medium 4.3
- Medium 4.3
Low5 ShowHide
-
Low 3.7
CVE-2023-22025 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition, product of Oracle Java SE (component: Hotspot). Supported versi…EPSS 1%
- Low 3.1
- Low 2.7
- Low 2.4
- Low 2.4