Summary: Oracle has released 318 new security patches in its January 2025 Critical Patch Update, addressing over 180 vulnerabilities that can be exploited remotely without authentication. Among these, 30 patches resolve critical-severity flaws, with Oracle Communications receiving the highest number of new patches. The update also includes security fixes for MySQL and various other Oracle applications, emphasizing the urgency of applying these patches to mitigate potential threats.
Threat Actor: Unknown | unknown
Victim: Oracle | Oracle
Keypoints :
- 318 new security patches released in January 2025 CPU, with over 180 vulnerabilities exploitable remotely without authentication.
- 220 unique CVEs identified, with 30 addressing critical-severity flaws.
- Oracle Communications received the highest number of patches at 85, while MySQL had 39 new patches addressing remote, unauthenticated vulnerabilities.
Source: https://www.securityweek.com/oracle-patches-200-vulnerabilities-with-january-2025-cpu/