Patch days / October 2024

Oracle Critical Patch Update — October 2024

Tuesday, 15 October 2024

Vulnerabilities: 85
Critical: 2
High: 32
Zero-days: 0
Public exploit: 1

Exploited 0

Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.

None of this release's vulnerabilities is known to be exploited so far.

Critical 2

Critical 9.8
CVE-2024-21216 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1…
Critical 9.0
CVE-2024-21172 Vulnerability in the Oracle Hospitality OPERA 5 product of Oracle Hospitality Applications (component: Opera Servlet). Supported versions that are affected are…

Public exploit code 1

Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.

Medium 6.5
CVE-2024-21262 Public exploit Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). Supported versions that are affected are 9.0.0 and prior. Easily exp…

All vulnerabilities 85

Critical2 Show

High32 Show

Medium36 Show

Low15 Show