Oracle Update to Fix 37 Security Flaws | CIO Insight

Oracle Update to Fix 37 Security Flaws

Written By
Brian Prince
Brian Prince
Apr 11, 2007
2 minute read

Oracle plans to release patches to plug 37 security holes in its products next week, according to a preview of the upcoming Critical Patch Update released April 10.

The update will be made available April 17 and will include 13 security fixes for Oracle Database, two for Oracle Enterprise Manager, and one each for Oracle Workflow Cartridge and the Ultra Search component affect code bundled with Oracle Database.

Microsoft patches four critical flaws. Click here to read more.

“[Three] of these vulnerabilities may be remotely exploitable without authentication, i.e. they may be exploited over a network without the need for a username and password,” the Redwood Shores, Calif., company reported in the announcement. “[Two] of these fixes are applicable to Oracle Database client-only installations, i.e. installations that do not have the Oracle Database installed.”

The update also features 11 security patches for the Oracle E-Business Suite, two of which may be remotely exploited without authentication, the company warned in the announcement. Five security fixes are planned for Oracle Application Server. Other patches address vulnerabilities in Oracle Enterprise Manager and the company’s PeopleSoft and JD Edwards Enterprise tools.

The upcoming release will be among the smallest patch loads in several months if it goes ahead as announced. In January, Oracle’s critical patch update addressed 51 flaws, while the company’s critical patch update last October contained more than 100 security fixes.

Check out eWEEK.com’s Security Center for the latest security news, reviews and analysis. And for insights on security coverage around the Web, take a look at eWEEK’s Security Watch blog.

CIO Insight Logo

CIO Insight offers thought leadership and best practices in the IT security and management industry while providing expert recommendations on software solutions for IT leaders. It is the trusted resource for security professionals who need to maintain regulatory compliance for their teams and organizations. CIO Insight is an ideal website for IT decision makers, systems integrators and administrators, and IT managers to stay informed about emerging technologies, software developments and trends in the IT security and management industry.

Property of TechnologyAdvice. © 2026 TechnologyAdvice. All Rights Reserved

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.