{"id":1809,"date":"2025-01-22T09:06:48","date_gmt":"2025-01-22T09:06:48","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/2025\/01\/22\/oracle-releases-january-2025-patch-for-318-flaws\/"},"modified":"2025-01-22T09:06:50","modified_gmt":"2025-01-22T09:06:50","slug":"oracle-releases-january-2025-patch-for-318-flaws","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/oracle-releases-january-2025-patch-for-318-flaws\/","title":{"rendered":"Oracle Releases January 2025 Patch for 318 Flaws"},"content":{"rendered":"\n<\/p>\n<p><strong>Oracle Urges Customers to Apply January 2025 Critical Patch Update<\/strong><\/p>\n<p><strong>January 22, 2025<\/strong><\/p>\n<p><strong>Oracle Security Alert<\/strong><\/p>\n<p>Oracle is urging customers to apply its January 2025 Critical Patch Update (CPU) to address 318 new security vulnerabilities spanning its products and services.<\/p>\n<p><strong>Severe Vulnerability in Oracle Agile Product Lifecycle Management (PLM) Framework<\/strong><\/p>\n<p>The most severe of the flaws is a bug in the Oracle Agile Product Lifecycle Management (PLM) Framework (CVE-2025-21556, CVSS score: 9.9) that could allow an attacker to seize control of susceptible instances.<\/p>\n<p><strong>Easily Exploitable Vulnerability<\/strong><\/p>\n<p>&quot;Easily exploitable vulnerability allows low privileged attackers with network access via HTTP to compromise Oracle Agile PLM Framework,&quot; according to a cybersecurity guide.<\/p>\n<p><strong>Other Critical Vulnerabilities<\/strong><\/p>\n<p>CVE-2025-21535 is also similar to CVE-2020-2883 (CVSS score: 9.8), another critical security vulnerability in Oracle WebLogic Server that could be exploited by an unauthenticated attacker with network access via IIOP or T3.<\/p>\n<p><strong>U.S. Cybersecurity and Infrastructure Security Agency (CISA) Alert<\/strong><\/p>\n<p>Earlier this month, the U.S. Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2020-2883 to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active in-the-wild exploitation.<\/p>\n<p><strong>Additional Vulnerability Addressed by Oracle<\/strong><\/p>\n<p>Oracle is also addressing CVE-2024-37371 (CVSS score: 9.1), a critical Kerberos 5 flaw affecting its Communications Billing and Revenue Management that could permit an attacker to &quot;cause invalid memory reads by sending message tokens with invalid length fields.&quot;<\/p>\n<p><strong>Action Required<\/strong><\/p>\n<p>Users are advised to apply the necessary patches to keep their systems up-to-date and avoid potential security risks.<\/p>\n<p><strong>Stay Informed<\/strong><\/p>\n<p>Follow us on Twitter and LinkedIn to read more exclusive content we post.<\/p>\n<p><strong>Related Resources<\/strong><\/p>\n<ul>\n<li>Oracle Security Alerts: <a href=\"https:\/\/www.oracle.com\/security-alerts\/\" rel=\"nofollow noopener\" target=\"_blank\">https:\/\/www.oracle.com\/security-alerts\/<\/a><\/li>\n<li>CVE-2025-21556: <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2025-21556\" rel=\"nofollow noopener\" target=\"_blank\">https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2025-21556<\/a><\/li>\n<li>CVE-2025-21535: <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2025-21535\" rel=\"nofollow noopener\" target=\"_blank\">https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2025-21535<\/a><\/li>\n<li>CVE-2024-37371: <a href=\"https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2024-37371\" rel=\"nofollow noopener\" target=\"_blank\">https:\/\/nvd.nist.gov\/vuln\/detail\/cve-2024-37371<\/a><\/li>\n<\/ul>\n\n<br \/><a href=\"https:\/\/thehackernews.com\/2025\/01\/oracle-releases-january-2025-patch-to.html\" rel=\"nofollow noopener\" target=\"_blank\">Source Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Oracle Urges Customers to Apply January 2025 Critical Patch Update January 22, 2025 Oracle Security Alert Oracle is urging customers to apply its January 2025 Critical Patch Update (CPU) to&#8230;<\/p>\n","protected":false},"author":19,"featured_media":1810,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[46,39,32,31,33,34,35,40,36,37,42,44,43,41,38,45],"class_list":["post-1809","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity","tag-computer-security","tag-cyber-attacks","tag-cyber-news","tag-cyber-security-news","tag-cyber-security-news-today","tag-cyber-security-updates","tag-cyber-updates","tag-data-breach","tag-hacker-news","tag-hacking-news","tag-how-to-hack","tag-information-security","tag-network-security","tag-ransomware-malware","tag-software-vulnerability","tag-the-hacker-news"],"jetpack_featured_media_url":"https:\/\/fusionmindlabs.com\/blogs\/wp-content\/uploads\/sites\/9\/2025\/01\/oracle.png","_links":{"self":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/1809","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/comments?post=1809"}],"version-history":[{"count":1,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/1809\/revisions"}],"predecessor-version":[{"id":1811,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/1809\/revisions\/1811"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media\/1810"}],"wp:attachment":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media?parent=1809"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/categories?post=1809"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/tags?post=1809"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}