Oracle has released the January Critical Patch Update, which includes patches for 318 vulnerabilities.
85% of the patches released in this update are for non-Oracle CVEs.
Security vulnerability patches included Oracle Communications, MySQL and Financial Services Applications.
The Oracle Critical Patch Update addressed vulnerabilities in Oracle Communications, Oracle MySQL, Oracle Financial Services Applications, Oracle GoldenGate, and others.
This update received 10 updates for Oracle Database products.
230 of the 318 security patches are for non-Oracle CVEs, such as open-source components included and exploitable in the context of their Oracle product distributions.
Oracle Communications received the highest number of patches at 85.
Oracle MySQL and Oracle Financial Services Applications followed with 39 and 31 security patches respectively.
Qualys released 12 QIDs that are mentioned in the article.
In the Critical Patch Update for Oracle Communications, 59 vulnerabilities can be exploited over a network without user credentials.