Risk: High
Oracle delivered patches to correct 38 vulnerabilities, including three that received the highest severity rating possible.
On its popular Database Server product, Oracle's quarterly security update corrected 16 flaws, six of which could be remotely exploited without authentication. Three of the database bugs received a rare 10 out of 10 rating under the Common Vulnerability Scoring System (CVSS), used to determine the flaw's severity.
The update also included patches for Application Server, E-Business Suite, PeopleSoft Enterprise, JD Edwards Tools, WebLogic/JRockit and Communications Order and Service Management.
Half of the 38 total fixes could be remotely exploited without authentication.