Oracle has released its quarterly security update. In total, there are 481 patches that close security vulnerabilities across the entire software portfolio. Oracle advises admins to install the updates promptly. So far, the software manufacturer has not mentioned any ongoing attacks.
A comprehensive list of threatened applications and now repaired versions can be found here . Admins should study this list to identify the relevant applications for them. Among the mass of vulnerabilities, particularly “ critical ” flaws in Oracle Communications (CVE-2025-6965), E-Business Suite (CVE-2026-34275), Fusion Middleware (CVE-2025-68615), and MySQL (CVE-2025-15467), among others, should be highlighted. By successfully exploiting these vulnerabilities, attackers can trigger crashes or even execute malicious code to completely compromise systems.
The Oracle Critical Patch Update is scheduled for July 21. If attackers exploit zero-day vulnerabilities meanwhile, the software manufacturer also releases security patches outside the regular schedule.
This article was originally published in German . It was translated with technical assistance and editorially reviewed before publication.
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
