Risk: High
Oracle's quarterly Critical Patch Update was issued on the 17th January and contains 41 security fixes for multiple Oracle products. The most critical of which could allow an attacker to gain complete control of backup systems, databases or web applications.
The 41 patches are listed as critical overall and Oracle strongly recommend that users apply fixes as soon as possible.
Five of the vulnerabilities, four of which affect the product Secure Back up (for windows) and one of which affects the Weblogic server, were listed as 10 on Oracle's 1-10 point common vulnerability scoring system.