Oracle released the first quarterly Critical Patch Update of 2025, addressing 378 security vulnerabilities in various product families including third-party components.
Oracle Communications received the highest number of patches (103), followed by Oracle MySQL and Oracle Communications Applications with 43 and 42 patches respectively.
Around 79% of the total patches (300 out of 378) are for non-Oracle CVEs, including open-source components integrated into Oracle product distributions.
Notable vulnerabilities were patched in Oracle Communications, Oracle MySQL, Oracle Communications Applications, Oracle Financial Services Applications, and Oracle Fusion Middleware.