Title

Multiple Vulnerabilities in Oracle Database (Cat I impact)

Discussion

Oracle has released their quarterly Critical Patch Update Advisory for October 2015. This Critical Patch Update contains 7 new security fixes for the Oracle Database Server. 1 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without the need for a username and password. None of these fixes are applicable to client-only installations, i.e., installations that do not have the Oracle Database Server installed. 1 new security fix for the Oracle Database Mobile/Lite Server. This vulnerability is not remotely exploitable without authentication, i.e., may not be exploited over a network without the need for a username and password.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-62033

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.