"The update will be made available April 17 and will include 13 security fixes for Oracle Database, two for Oracle Enterprise Manager, and one each for Oracle Workflow Cartridge and the Ultra Search component affect code bundled with Oracle Database. "

" "[Three] of these vulnerabilities may be remotely exploitable without authentication, i.e. they may be exploited over a network without the need for a username and password," the Redwood Shores, Calif., company reported in the announcement. "[Two] of these fixes are applicable to Oracle Database client-only installations, i.e. installations that do not have the Oracle Database installed." "

"The update also features 11 security patches for the Oracle E-Business Suite, two of which may be remotely exploited without authentication, the company warned in the announcement. Five security fixes are planned for
... read the whole article