Oracle biztonsági frissítések – 2017. október

2017. október 18. 12:43

CH azonosító

CH-14268

Angol cím

Oracle Critical Patch Update Advisory - October 2017

Felfedezés dátuma

2017.10.16.

Súlyosság

Kritikus

Érintett rendszerek

Oracle

Érintett verziók

Oracle Access Manager, version 11.1.2.3.0
Oracle Agile Engineering Data Management, versions 6.1.3, 6.2.0
Oracle Agile PLM, versions 9.3.5, 9.3.6
Oracle API Gateway, version 11.1.2.4.0
Oracle BI Publisher, versions 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0
Oracle Business Intelligence Enterprise Edition, versions 11.1.1.7.0, 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0
Oracle Business Process Management Suite, versions 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0
Oracle Communications Billing and Revenue Management, version 7.5
Oracle Communications Diameter Signaling Router (DSR), version 7.x
Oracle Communications EAGLE LNP Application Processor, version 10.x
Oracle Communications Messaging Server, version 8.x
Oracle Communications Order and Service Management, versions 7.2.4.x.x, 7.3.0.x.x, 7.3.1.x.x, 7.3.5.x.x
Oracle Communications Policy Management, versions 11.5, 12.x
Oracle Communications Services Gatekeeper, versions 5.1, 6.0
Oracle Communications Unified Session Manager, version SCz 7.x
Oracle Communications User Data Repository, version 10.x
Oracle Communications WebRTC Session Controller, versions 7.0, 7.1, 7.2
Oracle Database Server, versions 11.2.0.4, 12.1.0.2, 12.2.0.1
Oracle Directory Server Enterprise Edition, version 11.1.1.7.0
Oracle E-Business Suite, versions 12.1.1, 12.1.2, 12.1.3, 12.2.3, 12.2.4, 12.2.5, 12.2.6, 12.2.7
Oracle Endeca Information Discovery Integrator, versions 2.4, 3.0, 3.1, 3.2
Oracle Engineering Data Management, versions 6.1.3.0, 6.2.2.0
Oracle Enterprise Manager Ops Center, versions 12.2.2, 12.3.2
Oracle FLEXCUBE Universal Banking, versions 11.3, 11.4.0, 12.0.1, 12.0.2, 12.0.3, 12.1.0, 12.2.0, 12.3.0, 12.4.0
Oracle Fusion Applications, versions 11.1.2 through 11.1.9
Oracle Fusion Middleware, versions 11.1.1.7, 11.1.1.9, 11.1.2.2, 11.1.2.3, 12.1.3.0, 12.2.1.1, 12.2.1.2, 12.2.1.3
Oracle GlassFish Server, versions 3.0.1, 3.1.2
Oracle Healthcare Master Person Index, version 4.x
Oracle Hospitality Cruise AffairWhere, versions 2.2.5.0, 2.2.6.0, 2.2.7.0
Oracle Hospitality Cruise Fleet Management, version 9.0.2.0
Oracle Hospitality Cruise Materials Management, version 7.30.564.0
Oracle Hospitality Cruise Shipboard Property Management System, version 8.0.2.0
Oracle Hospitality Guest Access, versions 4.2.0, 4.2.1
Oracle Hospitality Hotel Mobile, version 1.1
Oracle Hospitality OPERA 5 Property Services, versions 5.4.2.x through 5.5.1.x
Oracle Hospitality Reporting and Analytics, versions 8.5.1, 9.0.0
Oracle Hospitality Simphony, versions 2.6, 2.7, 2.8, 2.9
Oracle Hospitality Suite8, versions 8.10.1, 8.10.2
Oracle HTTP Server, versions 11.1.1.7.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0
Oracle Hyperion BI+, version 11.1.2.4
Oracle Hyperion Financial Reporting, version 11.1.2
Oracle Identity Manager, version 11.1.2.3.0
Oracle Identity Manager Connector, version 9.1.1.5.0
Oracle Integrated Lights Out Manager (ILOM), versions prior to 3.2.6
Oracle iPlanet Web Server, version 7.0
Oracle Java SE, versions 6u161, 7u151, 8u144, 9
Oracle Java SE Embedded, version 8u144
Oracle JDeveloper, versions 12.1.3.0.0, 12.2.1.2.0
Oracle JRockit, version R28.3.15
Oracle Managed File Transfer, versions 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0
Oracle Outside In Technology, version 8.5.3.0
Oracle Retail Back Office, versions 13.2, 13.3, 13.4, 14.0, 14.1
Oracle Retail Clearance Optimization Engine, version 13.4
Oracle Retail Convenience and Fuel POS Software, version 2.1.132
Oracle Retail Markdown Optimization, versions 13.4, 14.0
Oracle Retail Point-of-Service, versions 6.0.x, 6.5.x, 7.0.x, 7.1.x, 15.0.x, 16.0.0
Oracle Retail Store Inventory Management, versions 13.2.9, 14.0.4, 14.1.3, 15.0.1, 16.0.1
Oracle Retail Xstore Point of Service, versions 6.0.11, 6.5.11, 7.0.6, 7.1.6, 15.0.1
Oracle Secure Global Desktop (SGD), version 5.3
Oracle SOA Suite, version 11.1.1.7.0
Oracle Transportation Management, versions 6.3.0, 6.3.1, 6.3.2, 6.3.3, 6.3.4, 6.3.5, 6.3.6, 6.3.7, 6.4.1, 6.4.2
Oracle Virtual Directory, versions 11.1.1.7.0, 11.1.1.9.0
Oracle VM VirtualBox, versions prior to 5.1.30
Oracle WebCenter Content, versions 11.1.1.9.0, 12.2.1.1.0, 12.2.1.2.0
Oracle WebCenter Sites, versions 11.1.1.8.0, 12.2.1.2.0
Oracle WebLogic Server, versions 10.3.6.0.0, 12.1.3.0.0, 12.2.1.1.0, 12.2.1.2.0

Összefoglaló

Az Oracle több kritikus és magas kockázati besorolású sérülékenysége vált ismertté, amelyeket kihasználva a támadó akár a rendszer feletti irányítást is átveheti. A sérülékenységeket kiküszöbölő megoldás már beszerezhető a gyártótól.