Oracle Releases Quarterly Critical Patch Update - Includes Critical Vulnerabilities
NJCCIC Advisory
Original Release Date: 4/22/2021
Summary
Oracle released their quarterly Critical Patch Update (CPU) Advisory addressing 390 new security vulnerabilities – 41 are considered critical with five receiving a CVSS score of 10. The most severe are considered remote code execution (RCE) vulnerabilities that may result in full system compromise if exploited. Patching is critical as threat actors often exploit both old and new vulnerabilities. Oracle further suggests users review previous CPU advisories to ensure they are using supported versions.
Recommendations
The NJCCIC strongly recommends Oracle users apply updates found in Oracle’s April 2021 Critical Patch Update Advisory immediately after appropriate testing.
The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.
View our Privacy Policy here.
View our Site Index here.