Basque Cyber Security Centre - Zibersegurtasun Euskal Zentroa

Argitalpen data: 2020/04/15

Garrantzia: Kritikoa 

Kaltetutako baliabideak: 

• Application Performance Management, 12.1.0.5, 13.2.0.0, 13.3.0.0 bertsioak;
• Application Service Level Management, 13.2.0.0, 13.3.0.0 bertsioak;
• Enterprise Manager Base Platform, 12.1.0.5, 13.2.0.0, 13.3.0.0 bertsioak;
• Hyperion Financial Management, 11.1.2.4 bertsioa; Enterprise Manager Base Platform, 12.1.0.5, 13.2.0.0, 13.3.0.0 bertsioak;
• Hyperion Financial Reporting, 11.1.2.4 bertsioa;
• Identity Manager Connector, 9.0 bertsioa;
• Instantis EnterpriseTrack, 17.1-17.3 bertsioak;
• Java Advanced Management Console, 2.16 bertsioa;
• JD Edwards EnterpriseOne Tools, 9.2 bertsioa;
• JD Edwards World Security, A9.3, A9.3.1, A9.4 bertsioak;
• MICROS Relate CRM Software, 11.4 bertsioa;
• MySQL Client, 5.6.47 eta lehenagoko bertsioak, 5.7.29 eta lehenagokoak, 8.0.18 eta lehenagokoak;
• MySQL Cluster, 7.3.28 bertsioa eta aurrekoak, 7.4.27 bertsioa eta aurrekoak, 7.5.17 bertsioa eta aurrekoak, 7.6.13 bertsioa eta aurrekoak, 8.0.19 bertsioa eta aurrekoak;
• MySQL Connectors, 5.1.48 eta lehenagoko bertsioak, eta 8.0.19 eta lehenagokoak;
• MySQL Enterprise Monitor, 4.0.11.5331 eta lehenagoko bertsioak, 8.0.18.1217 eta lehenagokoak;
• MySQL Server, 5.6.47 eta lehenagoko bertsioak, 5.7.29 eta lehenagokoak, 8.0.19 eta lehenagokoak;
• MySQL Workbench, 8.0.19 eta lehenagoko bertsioak;
• Oracle Access Manager, 11.1.2.3.0, 12.2.1.3.0 bertsioak;
• Oracle Agile PLM, 9.3.3, 9.3.5, 9.3.6 bertsioak;
• Oracle API Gateway, 11.1.2.4.0 bertsioa;
• Oracle Application Express, 19.2 bertsioa baino lehenagokoak;
• Oracle Application Testing Suite, 13.2.0.1, 13.3.0.1 bertsioak;
• Oracle Banking Enterprise Collections, 2.7.0, 2.8.0 bertsioak;
• Oracle Banking Enterprise Originations, 2.7.0, 2.8.0 bertsioak;
• Oracle Banking Enterprise Product Manufacturing, 2.7.0, 2.8.0 bertsioak;
• Oracle Banking Platform, 2.4.0, 2.4.1, 2.5.0, 2.6.0, 2.6.1, 2.6.2, 2.7.0, 2.7.1, 2.9.0 bertsioak;
• Oracle Big Data Discovery, 1.6 bertsioa;
• Oracle Business Intelligence Enterprise Edition, 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 bertsioak;
• Oracle Business Process Management Suite, 12.2.1.4.0 bertsioa;
• Oracle Coherence, 3.7.1.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 bertsioak;
• Oracle Communications ASAP Cartridges, 7.2, 7.3 bertsioak;
• Oracle Communications Calendar Server, 8.0.0.2.0, 8.0.0.3.0 bertsioak;
• Oracle Communications Converged Application Server - Service Controller, 6.1 bertsioa; 
• Oracle Communications Diameter Signaling Router (DSR), 8.0.0, 8.1.0, 8.2.0, 8.2.1 bertsioak;
• Oracle Communications Element Manager, 8.0.0, 8.1.0, 8.1.1, 8.2.0 bertsioak;
• Oracle Communications Evolved Communications Application Server, 7.1 bertsioa;
• Oracle Communications Messaging Server, 8.0.2 eta 8.1.0 bertsioak;
• Oracle Communications Operations Monitor, 3.4.0, 4.0.0, 4.1.0, 4.2.0, 4.3.0 bertsioak;
• Oracle Communications Service Broker, 6.0, 6.1 bertsioa;
• Oracle Communications Services Gatekeeper, 6.0, 6.1 bertsioak;
• Oracle Communications Session Report Manager, 8.0.0, 8.1.0, 8.1.1, 8.2.0 bertsioak;
• Oracle Communications Session Route Manager, 8.0.0, 8.1.0, 8.1.1, 8.2.0 bertsioak;
• Oracle Communications Unified Inventory Management, 7.3.0, 7.4.0 bertsioak;
• Oracle Communications WebRTC Session Controller, 7.2 bertsioa;
• Oracle Configurator, 12.1, 12.2 bertsioak;
• Oracle Database Server, 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, 19c bertsioak;
• Oracle E-Business Suite, 12.1.1-12.1.3, 12.2.3-12.2.9 bertsioak;
• Oracle Endeca Information Discovery Integrator, 3.2.0 bertsioa;
• Oracle Endeca Server, 7.7.0 bertsioa;
• Oracle Financial Services Analytical Applications Infrastructure, 8.0.6-8.0.9 bertsioak;
• Oracle Financial Services Asset Liability Management, 8.0.6, 8.0.7 bertsioak;
• Oracle Financial Services Balance Sheet Planning, 8.0.8 bertsioa;
• Oracle Financial Services Data Foundation, 8.0.6-8.0.9 bertsioak;
• Oracle Financial Services Deposit Insurance Calculations for Liquidity Risk Management, 8.0.7, 8.0.8 bertsioak;
• Oracle Financial Services Funds Transfer Pricing, 8.0.6, 8.0.7 bertsioak;
• Oracle Financial Services Hedge Management and IFRS Valuations, 8.0.6-8.0.8 bertsioak;
• Oracle Financial Services Liquidity Risk Management, 8.0.6 bertsioa;
• Oracle Financial Services Liquidity Risk Measurement and Management, 8.0.7, 8.0.8 bertsioak;
• Oracle Financial Services Loan Loss Forecasting and Provisioning, 8.0.6-8.0.8 bertsioak;
• Oracle Financial Services Market Risk Measurement and Management, 8.0.6, 8.0.8 bertsioak;
• Oracle Financial Services Price Creation and Discovery, 8.0.7 bertsioa;
• Oracle Financial Services Profitability Management, 8.0.6, 8.0.7 bertsioak;
• Oracle Financial Services Revenue Management and Billing Analytics, 2.6, 2.7, 2.8 bertsioak;
• Oracle FLEXCUBE Core Banking, 4.0 bertsioa;
• Oracle FLEXCUBE Private Banking, 12.0, 12.1 bertsioak;
• Oracle Fusion Middleware MapViewer, 12.2.1.3.0 bertsioa;
• Oracle Global Lifecycle Management NextGen OUI Framework, 12.2.1.3.0, 12.2.1.4.0, 13.9.4.2.2 bertsioak;
• Oracle Global Lifecycle Management OPatch, 11.2.0.3.23 bertsioa baino lehenagokoak, 12.2.0.1.19 baino lehenagokoak, 13.9.4.2.1 baino lehenagokoak;
• Oracle GraalVM Enterprise Edition, 19.3.1, 20.0.0 bertsioak;
• Oracle Health Sciences Information Manager, 3.0 bertsioa;
• Oracle Healthcare Data Repository, 7.0 bertsioa;
• Oracle Hospitality Reporting and Analytics, 9.1.0 bertsioa;
• Oracle HTTP Server, 11.1.1.9.0 bertsioa;
• Oracle In-Memory Performance-Driven Planning, 12.1, 12.2 bertsioak;
• Oracle Insurance Accounting Analyzer, 8.0.6-8.0.9 bertsioak;
• Oracle Java SE, 7u251, 8u241, 11.0.6, 14 bertsioak;
• Oracle Java SE Embedded, 8u241 bertsioa;
• Oracle Knowledge, 8.6.0-8.6.3 bertsioak;
• Oracle Managed File Transfer, 12.2.1.3.0, 12.2.1.4.0 bertsioak;
• Oracle Outside In Technology, 8.5.4, 8.5.5 bertsioak;
• Oracle Real User Experience Insight, 13.1.2.1, 13.2.3.1, 13.3.1.0 bertsioak;
• Oracle Retail Advanced Inventory Planning, 14.0, 15.0, 16.0 bertsioak;
• Oracle Retail Back Office, 14.1 bertsioa;
• Oracle Retail Central Office, 14.1 bertsioa;
• Oracle Retail Customer Management and Segmentation Foundation, 18.0 bertsioa;
• Oracle Retail Merchandising System, 16.0 bertsioa;
• Oracle Retail Order Broker, 15.0, 16.0, 18.0, 19.0 bertsioak;
• Oracle Retail Point-of-Service, 14.1 bertsioa;
• Oracle Retail Predictive Application Server, 15.0.3, 16.0.3 bertsioak;
• Oracle Retail Returns Management, 14.1 bertsioak;
• Oracle Retail Store Inventory Management, 16.0 bertsioa;
• Oracle Retail Xstore Point of Service, 7.1, 15.0, 16.0, 17.0, 18.0, 18.0.1 bertsioak;
• Oracle SD-WAN Edge, 7.3, 8.0, 8.1, 8.2 bertsioak;
• Oracle Secure Backup, 18.1 baino lehenagoko bertsioak;
• Oracle SOA Suite, 12.2.1.3.0, 12.2.1.4.0 bertsioak;
• Oracle Solaris, 10, 11 bertsioak;
• Oracle Transportation Management, 6.3.7, 6.4.2, 6.4.3 bertsioak;
• Oracle Unified Directory, 12.2.1.3.0, 12.2.1.4.0 bertsioak;
• Oracle Utilities Framework, 2.2.0, 4.2.0.2, 4.2.0.3, 4.3.0.2-4.3.0.6, 4.4.0.0, 4.4.0.2 bertsioak;
• Oracle Utilities Network Management System, 1.12.0.3, 2.3.0.1, 2.3.0.2, 2.4.0.0 bertsioak; 
• Oracle VM VirtualBox, 5.2.40 baino lehenagoko bertsioak, 6.0.20 baino lehenagokoak, 6.1.6 baino lehenagokoak;
• Oracle WebCenter Portal, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0 bertsioak;
• Oracle WebCenter Sites, 12.2.1.3.0, 12.2.1.4.0 bertsioak;
• Oracle WebLogic Server, 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 bertsioak;
• OSS Support Tools, 20.0, 20.1 bertsioak;
• PeopleSoft Enterprise CS Campus Community, 9.2 bertsioa;
• PeopleSoft Enterprise HCM Absence Management, 9.2 bertsioa;
• PeopleSoft Enterprise HRMS, 9.2 bertsioa;
• PeopleSoft Enterprise PeopleTools, 8.56, 8.57, 8.58 bertsioak;
• PeopleSoft Enterprise SCM Purchasing, 9.2 bertsioa;
• Primavera Gateway, 16.2.0-16.2.11, 17.12.0-17.12.6, 18.8.0-18.8.8, 19.12.0 bertsioak;
• Primavera P6 Enterprise Project Portfolio Management, 16.2.0.0-16.2.19.3, 17.12.0.0-17.12.17.0, 18.8.0.0-18.8.18.0, 19.12.1.0-19.12.3.0, 20.1.0.0-20.2.0.0 bertsioak;
• Primavera Unifier, 16.1, 16.2, 17.7-17.12, 18.8, 19.12 bertsioak;
• Siebel Applications, 20.2 eta lehenagoko bertsioak;
• StorageTek Tape Analytics SW Tool, 2.3.0 bertsioa;
• Sun ZFS Storage Appliance Kit, 8.8 bertsioa.

Azalpena: 

Oraclek partxedun eguneraketa kritiko bat argitaratu du, hainbat produkturi eragiten dieten ahultasunak zuzentzeko.

Konponbidea: 

Kaltetutako produktuen arabera, dagozkien partxeak aplikatzea. Eguneraketak deskargatzeko informazioa Oraclek argitaratutako segurtasun buletinean lor daiteke.

Xehetasuna: 

Eguneraketa horrek 397 ahultasun konpontzen ditu guztira, horietako batzuk kritikoak. Konpondutako ahultasunen xehetasuna Erreferentziak atalean dagoen Oracle-ren loturan kontsulta daiteke.

Etiketak: Eguneraketa, Oracle, Ahultasuna