January 2019 Oracle Critical Patch Update Information

Oracle’s regularly scheduled Critical Patch Update releases today, and as usual addresses a plethora of vulnerabilities across a number of applications. Oracle’s summary of the updates can be seen here: https://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html

Oracle listed the following product families that are being patched:

• Oracle Database Server
• Oracle Communications Applications
• Oracle Construction and Engineering Suite
• Oracle E-Business Suite
• Oracle Enterprise Manager Products Suite
• Oracle Financial Services Applications
• Oracle Food and Beverage Applications
• Oracle Fusion Middleware
• Oracle Health Sciences Applications
• Oracle Hospitality Applications
• Oracle Hyperion
• Oracle Insurance Applications
• Oracle Java SE
• Oracle JD Edwards Products
• Oracle MySQL
• Oracle PeopleSoft Products
• Oracle Retail Applications
• Oracle Siebel CRM
• Oracle Sun Systems Products Suite
• Oracle Supply Chain Products Suite
• Oracle Support Tools
• Oracle Utilities Applications
• Oracle Virtualization.

Many of the vulnerabilities being addressed in this update have CVSS scores are over 9.0 (Critical).

As always, we’ll be releasing plugins as quickly as possible which will appear here: https://www.tenable.com/plugins/search?q=script_id%3A(%22700390%22%20OR%20%20%22700391%22%20OR%20%20%22700392%22%20OR%20%20%22700393%22)+OR+%22Jan%202019%20CPU%22&sort=&page=1

Update 1/17/19: Tenable.io Container Security offers coverage for Oracle Java, Oracle MySQL, Oracle WebLogic and Oracle RDBMS. Learn more here: https://www.tenable.com/products/tenable-io/container-security