This week, Oracle revealed that it would release its last Critical Patch Update of 2019, which includes as many as 218 new security patches across numerous products.

More than 140 of the flaws highlighted this month can be exploited remotely without verification. Nineteen of the fixes were released for faults that are thought to be Critical severity, featuring a CVSS score above 9.0.

According to Oracle, 31 of the fixed security problems are remotely useable without verification.

MySQL saw the issue of 34 security fixes, with 9 faults remotely useable without verification, while Java SE received 20 fixes, all of the highlighted flaws being remotely useable by unauthenticated attackers.

Most of the fixes issued this month highlight extra flaws in the affected products, Oracle has revealed.

“Due to the threat posed by a successful attack, Oracle strongly recommends that customers apply Critical Patch Update security patches as soon as possible,” the company notes.

Customers that have left one or more Critical Patch Updates are counseled to analyze formerly issued advisories to determine if they are susceptible.

They should also apply the suitable security fixes at the earliest, given that malicious actors have been known to target the company’s products.

Leave a Reply

Your email address will not be published. Required fields are marked *