Search: “Hyperion”

Oracle’s September patches put Fusion Middleware back in the hot seat

Oracle's September 2026 CPU ships 673 patches including six CVSS 10.0 flaws in Fusion Middleware and Hyperion, none exploited in the wild.

Oracle's September 2026 Critical Security Patch Update delivers 673 patches across 17 product families, led by E-Business Suite with 159 fixes and Fusion Middleware with 153. Six CVSS 10.0 vulnerabilities in Access Manager, Forms, Internet Directory, Platform Security for Java, WebLogic Server, and Hyperion are remotely exploitable without authentication, and Oracle reports none exploited in the wild. Now patching monthly, Oracle urged immediate deployment and warned that unsupported releases are not tested for these flaws.

CSO Online·15:54 UTC · 4h agoVulnerabilityCVE-2026-71133CVE-2026-83099CVE-2026-83059+16 CVEs

Oracle September 2026 Critical Security Patch Update addresses 672 CVEs

Oracle's September 2026 CSPU fixes 672 CVEs across 673 patches, including 104 critical updates, with E-Business Suite receiving the most patches (159).

Oracle released its September 2026 Critical Security Patch Update fixing 672 unique CVEs via 673 security updates across 17 product families, with 104 patches (15.5%) rated critical and 503 rated high. Oracle E-Business Suite received the most patches at 159 (23.6%), followed by Fusion Middleware at 153, of which 78 are remotely exploitable without authentication. The CSPU is a monthly release cycle Oracle introduced in May 2026 between larger quarterly CPUs. Tenable will publish plugins to identify affected systems.

Tenable Blog·Sep 15, 21:00 UTC · 22h agoVulnerability

Two Additional Malicious Python Libraries Found on PyPI Repository

Infosecurity Magazine·Aug 16, 17:30 UTC · Aug 16, 2022Vulnerability1

Two more malicious Python packages in the PyPI

Kaspersky Securelist·Aug 16, 12:13 UTC · Aug 16, 2022Vulnerability1

Oracle Critical Patch Update for January 2022 will fix 483 new flaws

Security Affairs·Jan 17, 22:14 UTC · Jan 17, 2022Vulnerability

Oracle fixes critical RCE vulnerabilities in Weblogic Server

Security Affairs·Jul 22, 17:58 UTC · Jul 22, 2021VulnerabilityCVE-2019-2729CVE-2021-2394CVE-2021-2397+4 CVEs

Oracle Warns of Critical Remotely Exploitable Weblogic Server Flaws

The Hacker News·Jul 22, 08:21 UTC · Jul 22, 2021VulnerabilityCVE-2019-2729CVE-2021-2394CVE-2021-2397+6 CVEs

Oracle fixes 252 vulnerabilities in October 2017 Critical Patch Update

Help Net Security·May 28, 10:21 UTC · May 28, 2020VulnerabilityCVE-2017-10402CVE-2017-10405CVE-2017-10404

October 2017 Oracle Critical Patch Update addresses 252 Vulnerabilities

Security Affairs·Oct 19, 07:03 UTC · Oct 19, 2017VulnerabilityCVE-2017-10366

Oracle July 2017 Critical Patch Update addresses record-breaking 308 issues

Security Affairs·Jul 19, 14:51 UTC · Jul 19, 2017VulnerabilityCVE-2017-3632CVE-2017-10137CVE-2017-10244