Risk: High
Oracle has issued patches for 37 vulnerabilities in its database and e-business suite as well as JD Edwards and PeopleSoft products. Still, at least it's a little better than the last time Oracle released a batch of fixes; in January it issued patches for 51 vulnerabilities.
Oracle rates its vulnerabilities by assigning a score based on its Common Vulnerability Scoring System. The highest available score is 10 and although no vulnerability has ever been rated that highly by Oracle, a core RDBMS vulnerability is rated as a 7.0, the highest score ever for an Oracle product.
The Critical Patch Update contains full vulnerability details and is available at:
http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpuapr2007.html