Impatto Sistemico

Alto (66.66)

Sintesi

Oracle ha rilasciato il Critical Patch Update di luglio che mira a correggere numerose vulnerabilità su più prodotti, di cui 210 con gravità “critica” e 539 con gravità “alta”.

Tipologia

• Arbitrary Code Execution
• Information Disclosure
• Authentication Bypass
• Denial of Service
• Privilege Escalation

Prodotti e/o versioni affette

Oracle

• Application Testing Suite
• Public Sector Financials (International)
• Cost Management
• Retail EFTLink
• Human Resources
• Utilities Network Management System
• Retail Integration Bus
• Enterprise Manager Base Platform
• Communications Pricing Design Center
• Product Workbench
• PeopleSoft Enterprise PeopleTools
• Siebel CRM Cloud Applications
• Product Hub
• Document Management and Collaboration
• Bills of Material
• Contracts Integration
• Siebel CRM Development
• Access Manager
• Net Services
• Database Server
• VM VirtualBox
• Data Integrator
• Java SE
• Workflow
• WebLogic Server
• GoldenGate
• MySQL Server
• Hospitality Simphony
• BI Publisher
• Payments
• MySQL Connectors
• Coherence
• MySQL Router
• Identity Manager
• WebCenter Content
• Project Costing
• JDeveloper
• Unified Directory
• HTTP Server
• Platform Security for Java
• Service Delivery Platform
• TimesTen In-Memory Database
• WebCenter Enterprise Capture
• WebCenter Content: Imaging
• JD Edwards EnterpriseOne CRM Foundation
• JD Edwards EnterpriseOne HCM Foundation
• JD Edwards EnterpriseOne Human Resources Management
• JD Edwards EnterpriseOne General Ledger
• JD Edwards EnterpriseOne Requirements Planning
• JD Edwards EnterpriseOne Advanced Pricing – Procurement
• JD Edwards EnterpriseOne Solution Advisor
• Identity Manager Connector
• Managed File Transfer
• SOA Suite
• Business Process Management Suite
• WebCenter Sites
• WebCenter Portal
• Enterprise Command Center Framework
• Transportation Management
• PeopleSoft Enterprise FIN Staffing Front Office
• PeopleSoft Enterprise CS Campus Community
• PeopleSoft Enterprise FIN Cash Management
• PeopleSoft Enterprise CS Student Records
• PeopleSoft Enterprise FIN Project Costing
• PeopleSoft Enterprise CS Student Financials
• PeopleSoft Enterprise CC Common Application Objects
• JD Edwards EnterpriseOne Procurement and Subcontract Management
• JD Edwards EnterpriseOne Tools
• Solaris
• PeopleSoft Enterprise HCM Global Payroll Switzerland
• PeopleSoft Enterprise HCM Human Resources
• Applications Technology Stack
• Business Intelligence Enterprise Edition
• Applications Framework
• Common Application Components
• General Ledger
• Process Manufacturing Regulatory Management
• U.S. Federal Financials
• Content Manager
• Enterprise Asset Management
• Universal Work Queue
• Interaction Blending
• Process Manufacturing Inventory
• Process Manufacturing Financials
• EDI Gateway
• Price Protection
• iReceivables
• Trading Community
• Sales Offline
• E-Business Intelligence
• Installed Base
• Field Service
• Cash Management
• Assets
• Payroll
• Applications Manager
• Financials Common Modules
• Application Object Library
• Complex Maintenance, Repair and Overhaul
• Receivables
• TeleSales
• Compensation Workbench
• Supply Chain Trading Connector
• iStore
• iSupport
• Advanced Outbound Telephony
• HCM Common Architecture
• Demand Signal Repository
• Customer Support
• Mobile Application Server
• Project Contracts
• Lease and Finance Management
• Quality
• Quoting
• Advanced Pricing
• Risk Management
• Order Management
• Trade Management
• Work in Process
• Warehouse Management
• HCM Configuration Workbench
• Project Intelligence
• Property Manager
• Inventory Management
• Shipping Execution
• Customer Care
• Capacity
• Public Sector Payroll
• Public Sector Financials
• Labor Distribution
• Service Fulfillment Manager
• Learning Management
• Time and Labor
• Transportation Execution
• Telecommunications Billing Integrator
• SDP Number Portability
• Treasury
• HRMS (France)
• Public Sector Human Resources
• E-Business Tax
• Scripting
• US Federal Human Resources
• Project Portfolio Analysis
• Advanced Collections
• Process Manufacturing Systems
• Landed Cost Management
• Process Manufacturing Logistics
• Customers Online
• iRecruitment
• Process Manufacturing Product Development
• Financials Common Country
• Financials for the Americas
• Loans
• Advanced Supply Chain Planning
• Demantra Demand Management
• Production Scheduling
• Communications BRM – Elastic Charging Engine
• PeopleSoft Enterprise SCM Order Management
• PeopleSoft Enterprise SCM Supplier Contract Management
• PeopleSoft Enterprise FIN Billing Argentina
• PeopleSoft Enterprise FIN Staffing Front Office Brazil
• PeopleSoft Enterprise FIN Common Objects Brazil
• PeopleSoft Enterprise HCM Talent Acquisition Manager
• PeopleSoft Enterprise SCM Mobile Inventory Management
• PeopleSoft Enterprise SCM Inventory
• PeopleSoft Enterprise FIN Payables
• PeopleSoft Enterprise SCM Manufacturing
• Project Foundation
• Communications Billing and Revenue Management
• Communications Unified Inventory Management
• Banking Trade Finance Process Management
• MES for Process Manufacturing
• Banking Trade Finance
• Applications DBA
• HRMS (UK)
• HRMS (US)
• Configure to Order
• Communications Service Catalog and Design
• Commerce Platform
• Advanced Benefits
• Commerce Guided Search / Commerce Experience Manager
• Commerce Guided Search Platform Services
• Agile PLM
• Product Lifecycle Analytics
• Agile Product Lifecycle Management for Process
• Agile Engineering Data Management
• PeopleSoft Enterprise CRM Common Objects
• PeopleSoft Enterprise FIN Expenses
• PeopleSoft Enterprise FIN Program Management
• PeopleSoft Enterprise SCM Purchasing
• PeopleSoft Enterprise SCM eProcurement
• PeopleSoft In-Memory Project Discovery
• E-Business Suite Secure Enterprise Search
• Communications Converged Application Server
• PeopleSoft Enterprise FIN Common Objects Argentina
• PeopleSoft Enterprise FIN Manufacturing Argentina
• PeopleSoft Enterprise FIN Manufacturing Brazil
• In-Memory Cost Management for Discrete Industries
• Payables
• Purchasing
• Process Manufacturing Process Execution
• Yard Management
• Flow Manufacturing
• Advanced Planning Command Center
• HRMS (Norway)

Azioni di mitigazione

In linea con le dichiarazioni del vendor, si consiglia di aggiornare i prodotti all’ultima versione disponibile.

Per approfondimenti sui prodotti interessati e sulle modalità di intervento si consiglia di fare riferimento al bollettino di sicurezza disponibile nella sezione Riferimenti.

Di seguito sono riportate le sole CVE relative alle vulnerabilità con gravità “critica” e “alta”: