Risk: Medium
Oracle's quarterly Critical Patch Update was issued on 16th October and contains 51 security fixes for multiple Oracle products.
The update has fixed 27 bugs in the Oracle database. Some of the vulnerabilities identified could be exploited without a username or password.
The maximum severity of the flaws is 6.8, as measured on version 2 of the Common Vulnerability Scoring System, which uses a scale of 1 to 10.
Oracle's next Critical Patch Update will be issued on 15th January 2008.