{"id":2414,"date":"2020-10-29T16:01:03","date_gmt":"2020-10-29T21:01:03","guid":{"rendered":"https:\/\/cert.pa\/?p=2414"},"modified":"2020-10-29T16:01:03","modified_gmt":"2020-10-29T21:01:03","slug":"csirt-panama-aviso-2020-10-29-oracle-actualizaciones-criticas-en-oracle-octubre-2020","status":"publish","type":"post","link":"https:\/\/cert.pa\/?p=2414","title":{"rendered":"CSIRT Panam\u00e1 Aviso 2020-10-29 Oracle: Actualizaciones cr\u00edticas en Oracle (octubre 2020)."},"content":{"rendered":"\n

<\/p>\n\n\n\n

Gravedad: Alta                                                                                                   <\/p>\n\n\n\n

Fecha de publicaci\u00f3n: Octubre 29,\n2020
\n\u00daltima revisi\u00f3n: Octubre 29, 2020
\nPortal: https:\/\/www.oracle.com\/<\/p>\n\n\n\n

Sistemas Afectados: Diversas vulnerabilidades que\nafectan a todas las versiones de Oracle. <\/p>\n\n\n\n

  1. Descripci\u00f3n<\/strong><\/li><\/ol>\n\n\n\n

    Oracle ha publicado una actualizaci\u00f3n cr\u00edtica con\nparches para corregir vulnerabilidades que afectan a m\u00faltiples productos. <\/p>\n\n\n\n

    1. Impacto<\/strong><\/li><\/ol>\n\n\n\n

      Esta actualizaci\u00f3n resuelve un total de 402\nvulnerabilidades, algunas de las cuales son cr\u00edticas. <\/p>\n\n\n\n

      Los recursos afectados son: <\/p>\n\n\n\n

      • Application\nPerformance Management (APM), versiones 13.3.0.0, 13.4.0.0;<\/li>
      • Big\nData Spatial and Graph, versiones anteriores a 3.0;<\/li>
      • Enterprise\nManager Base Platform, versiones 13.2.1.0, 13.3.0.0, 13.4.0.0;<\/li>
      • Enterprise\nManager for Peoplesoft, versi\u00f3n 13.4.1.1;<\/li>
      • Enterprise\nManager for Storage Management, versiones 13.3.0.0, 13.4.0.0;<\/li>
      • Enterprise\nManager Ops Center, versi\u00f3n 12.4.0.0;<\/li>
      • Fujitsu\nM10-1, M10-4, M10-4S, M12-1, M12-2, M12-2S Servers, versiones anteriores a\nXCP2362, y anteriores a XCP3090;<\/li>
      • Fujitsu\nM12-1, M12-2, M12-2S Servers, versiones anteriores a XCP3090;<\/li>
      • Hyperion\nAnalytic Provider Services, versi\u00f3n 11.1.2.4;<\/li>
      • Hyperion\nBI+, versi\u00f3n 11.1.2.4;<\/li>
      • Hyperion\nEssbase, versi\u00f3n 11.1.2.4;<\/li>
      • Hyperion\nInfrastructure Technology, versi\u00f3n 11.1.2.4;<\/li>
      • Hyperion\nLifecycle Management, versi\u00f3n 11.1.2.4;<\/li>
      • Hyperion\nPlanning, versi\u00f3n 11.1.2.4;<\/li>
      • Identity\nManager Connector, versi\u00f3n 9.0;<\/li>
      • Instantis\nEnterpriseTrack, versiones 17.1, 17.2, 17.3;<\/li>
      • Management\nPack for Oracle GoldenGate, versi\u00f3n 12.2.1.2.0;<\/li>
      • MySQL\nCluster, versiones 7.3.30 y anteriores, 7.4.29 y anteriores, 7.5.19 y\nanteriores, 7.6.15 y anteriores, 8.0.21 y anteriores;<\/li>
      • MySQL\nEnterprise Monitor, versiones 8.0.21 y anteriores;<\/li>
      • MySQL\nServer, versiones 5.6.49 y anteriores, 5.7.31 y anteriores, 8.0.21 y\nanteriores;<\/li>
      • MySQL\nWorkbench, versiones 8.0.21 y anteriores;<\/li>
      • Oracle\nAccess Manager, versi\u00f3n 11.1.2.3.0;<\/li>
      • Oracle\nAgile PLM, versiones 9.3.3, 9.3.5, 9.3.6;<\/li>
      • Oracle\nAgile Product Lifecycle Management for Process, versi\u00f3n 6.2.0.0;<\/li>
      • Oracle\nApplication Express, versiones anteriores a 20.2;<\/li>
      • Oracle\nApplication Testing Suite, versi\u00f3n 13.3.0.1;<\/li>
      • Oracle\nBanking Corporate Lending, versiones 12.3.0, 14.0.0-14.4.0;<\/li>
      • Oracle\nBanking Digital Experience, versiones 18.1, 18.2, 18.3, 19.1, 19.2, 20.1;<\/li>
      • Oracle\nBanking Payments, versiones 14.1.0-14.4.0;<\/li>
      • Oracle\nBanking Platform, versiones 2.4.0-2.10.0;<\/li>
      • Oracle\nBI Publisher, versiones 5.5.0.0.0, 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0;<\/li>
      • Oracle\nBusiness Intelligence Enterprise Edition, versiones 5.5.0.0.0, 11.1.1.9.0,\n12.2.1.3.0, 12.2.1.4.0;<\/li>
      • Oracle\nBusiness Process Management Suite, versiones 12.2.1.3.0, 12.2.1.4.0;<\/li>
      • Oracle\nCommunications Application Session Controller, versiones 3.8m0, 3.9m0p1;<\/li>
      • Oracle\nCommunications Billing and Revenue Management, versiones 7.5.0.23.0,\n12.0.0.2.0, 12.0.0.3.0;<\/li>
      • Oracle\nCommunications BRM – Elastic Charging Engine, versiones 11.3.0.9.0, 12.0.0.3.0;<\/li>
      • Oracle\nCommunications Diameter Signaling Router (DSR), versiones 8.0.0.0-8.4.0.5,\n[IDIH] 8.0.0-8.2.2;<\/li>
      • Oracle\nCommunications EAGLE Software, versiones 46.6.0-46.8.2;<\/li>
      • Oracle\nCommunications Element Manager, versiones 8.2.0-8.2.2;<\/li>
      • Oracle\nCommunications Evolved Communications Application Server, versi\u00f3n 7.1;<\/li>
      • Oracle\nCommunications Messaging Server, versi\u00f3n 8.1;<\/li>
      • Oracle\nCommunications Offline Mediation Controller, versi\u00f3n 12.0.0.3.0;<\/li>
      • Oracle\nCommunications Services Gatekeeper, versi\u00f3n 7;<\/li>
      • Oracle\nCommunications Session Border Controller, versiones 8.2-8.4;<\/li>
      • Oracle\nCommunications Session Report Manager, versiones 8.2.0-8.2.2;<\/li>
      • Oracle\nCommunications Session Route Manager, versiones 8.2.0-8.2.2;<\/li>
      • Oracle\nCommunications Unified Inventory Management, versiones 7.3.0, 7.4.0;<\/li>
      • Oracle\nCommunications WebRTC Session Controller, versi\u00f3n 7.2;<\/li>
      • Oracle\nData Integrator, versiones 11.1.1.9.0, 12.2.1.3.0;<\/li>
      • Oracle\nDatabase Server, versiones 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, 19c;<\/li>
      • Oracle\nE-Business Suite, versiones 12.1.1-12.1.3, 12.2.3-12.2.10;<\/li>
      • Oracle\nEndeca Information Discovery Integrator, versi\u00f3n 3.2.0;<\/li>
      • Oracle\nEndeca Information Discovery Studio, versi\u00f3n 3.2.0;<\/li>
      • Oracle\nEnterprise Repository, versi\u00f3n 11.1.1.7.0;<\/li>
      • Oracle\nEnterprise Session Border Controller, versi\u00f3n 8.4;<\/li>
      • Oracle\nFinancial Services Analytical Applications Infrastructure, versiones\n8.0.6-8.1.0;<\/li>
      • Oracle\nFinancial Services Analytical Applications Reconciliation Framework, versiones\n8.0.6-8.0.8, 8.1.0;<\/li>
      • Oracle\nFinancial Services Asset Liability Management, versiones 8.0.6, 8.0.7, 8.1.0;<\/li>
      • Oracle\nFinancial Services Balance Sheet Planning, versi\u00f3n 8.0.8;<\/li>
      • Oracle\nFinancial Services Basel Regulatory Capital Basic, versiones 8.0.6-8.0.8,\n8.1.0;<\/li>
      • Oracle\nFinancial Services Basel Regulatory Capital Internal Ratings Based Approach,\nversiones 8.0.6-8.0.8, 8.1.0;<\/li>
      • Oracle\nFinancial Services Data Foundation, versiones 8.0.6-8.1.0;<\/li>
      • Oracle\nFinancial Services Data Governance for US Regulatory Reporting, versiones 8.0.6-8.0.9;<\/li>
      • Oracle\nFinancial Services Data Integration Hub, versiones 8.0.6, 8.0.7, 8.1.0;<\/li>
      • Oracle\nFinancial Services Funds Transfer Pricing, versiones 8.0.6, 8.0.7, 8.1.0;<\/li>
      • Oracle\nFinancial Services Hedge Management and IFRS Valuations, versiones 8.0.6-8.0.8,\n8.1.0;<\/li>
      • Oracle\nFinancial Services Institutional Performance Analytics, versiones 8.0.6, 8.0.7,\n8.1.0, 8.7.0;<\/li>
      • Oracle\nFinancial Services Liquidity Risk Management, versi\u00f3n 8.0.6;<\/li>
      • Oracle\nFinancial Services Liquidity Risk Measurement and Management, versiones 8.0.7,\n8.0.8, 8.1.0;<\/li>
      • Oracle\nFinancial Services Loan Loss Forecasting and Provisioning, versiones\n8.0.6-8.0.8, 8.1.0;<\/li>
      • Oracle\nFinancial Services Market Risk Measurement and Management, versiones 8.0.6,\n8.0.8, 8.1.0;<\/li>
      • Oracle\nFinancial Services Price Creation and Discovery, versiones 8.0.6, 8.0.7;<\/li>
      • Oracle\nFinancial Services Profitability Management, versiones 8.0.6, 8.0.7, 8.1.0;<\/li>
      • Oracle\nFinancial Services Regulatory Reporting for European Banking Authority,\nversiones 8.0.6-8.1.0;<\/li>
      • Oracle\nFinancial Services Regulatory Reporting for US Federal Reserve, versiones\n8.0.6-8.0.9;<\/li>
      • Oracle\nFinancial Services Regulatory Reporting with AgileREPORTER, versi\u00f3n 8.0.9.2.0;<\/li>
      • Oracle\nFinancial Services Retail Customer Analytics, versi\u00f3n 8.0.6;<\/li>
      • Oracle\nFLEXCUBE Core Banking, versiones 5.2.0, 11.5.0-11.7.0;<\/li>
      • Oracle\nFLEXCUBE Direct Banking, versiones 12.0.1, 12.0.2, 12.0.3;<\/li>
      • Oracle\nFLEXCUBE Private Banking, versiones 12.0.0, 12.1.0;<\/li>
      • Oracle\nFLEXCUBE Universal Banking, versiones 12.3.0, 14.0.0-14.4.0;<\/li>
      • Oracle\nGoldenGate Application Adapters, versiones 12.3.2.1.0, 19.1.0.0.0;<\/li>
      • Oracle\nGraalVM Enterprise Edition, versiones 19.3.3, 20.2.0;<\/li>
      • Oracle\nHealth Sciences Empirica Signal, versi\u00f3n 9.0;<\/li>
      • Oracle\nHealthcare Data Repository, versi\u00f3n 7.0.1;<\/li>
      • Oracle\nHealthcare Foundation, versiones 7.1.1, 7.2.0, 7.2.1, 7.3.0;<\/li>
      • Oracle\nHospitality Guest Access, versiones 4.2.0, 4.2.1;<\/li>
      • Oracle\nHospitality Materials Control, versi\u00f3n 18.1;<\/li>
      • Oracle\nHospitality OPERA 5 Property Services, versiones 5.5, 5.6;<\/li>
      • Oracle\nHospitality Reporting and Analytics, versi\u00f3n 9.1.0;<\/li>
      • Oracle\nHospitality RES 3700, versi\u00f3n 5.7;<\/li>
      • Oracle\nHospitality Simphony, versiones 18.1, 18.2, 19.1.0-19.1.2;<\/li>
      • Oracle\nHospitality Suite8, versiones 8.10.2, 8.11-8.15;<\/li>
      • Oracle\nHTTP Server, versiones 12.2.1.3.0, 12.2.1.4.0;<\/li>
      • Oracle\nInsurance Accounting Analyzer, versi\u00f3n 8.0.9;<\/li>
      • Oracle\nInsurance Allocation Manager for Enterprise Profitability, versiones 8.0.8,\n8.1.0;<\/li>
      • Oracle\nInsurance Data Foundation, versiones 8.0.6-8.1.0;<\/li>
      • Oracle\nInsurance Insbridge Rating and Underwriting, versiones 5.0.0.0-5.6.0.0, 5.6.1.0;<\/li>
      • Oracle\nInsurance Policy Administration J2EE, versiones 10.2.0.37, 10.2.4.12,\n11.0.2.25, 11.1.0.15, 11.2.0.26, 11.2.2.0;<\/li>
      • Oracle\nInsurance Rules Palette, versiones 10.2.0.37, 10.2.4.12, 11.0.2.25, 11.1.0.15,\n11.2.0.26;<\/li>
      • Oracle\nJava SE, versiones 7u271, 8u261, 11.0.8, 15;<\/li>
      • Oracle\nJava SE Embedded, versi\u00f3n 8u261;<\/li>
      • Oracle\nJDeveloper, versiones 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0;<\/li>
      • Oracle\nManaged File Transfer, versiones 12.2.1.3.0, 12.2.1.4.0;<\/li>
      • Oracle\nOutside In Technology, versiones 8.5.4, 8.5.5;<\/li>
      • Oracle\nPolicy Automation, versiones 12.2.0-12.2.20;<\/li>
      • Oracle\nPolicy Automation Connector for Siebel, versi\u00f3n 10.4.6;<\/li>
      • Oracle\nPolicy Automation for Mobile Devices, versiones 12.2.0-12.2.20;<\/li>
      • Oracle\nREST Data Services, versiones 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, 19c, [Standalone\nORDS] y anteriores a 20.2.1;<\/li>
      • Oracle\nRetail Advanced Inventory Planning, versi\u00f3n 14.1;<\/li>
      • Oracle\nRetail Assortment Planning, versiones 15.0.3.0, 16.0.3.0;<\/li>
      • Oracle\nRetail Back Office, versiones 14.0, 14.1;<\/li>
      • Oracle\nRetail Bulk Data Integration, versiones 15.0.3.0, 16.0.3.0;<\/li>
      • Oracle\nRetail Central Office, versiones 14.0, 14.1;<\/li>
      • Oracle\nRetail Customer Management and Segmentation Foundation, versiones 18.0, 19.0;<\/li>
      • Oracle\nRetail Integration Bus, versiones 14.1, 15.0, 16.0;<\/li>
      • Oracle\nRetail Order Broker, versiones 15.0, 16.0, 18.0, 19.0, 19.1, 19.2, 19.3;<\/li>
      • Oracle\nRetail Point-of-Service, versiones 14.0, 14.1;<\/li>
      • Oracle\nRetail Predictive Application Server, versiones 14.1.3.0, 15.0.3.0, 16.0.3.0;<\/li>
      • Oracle\nRetail Price Management, versiones 14.0.4, 14.1.3.0, 15.0.3.0, 16.0.3.0;<\/li>
      • Oracle\nRetail Returns Management, versiones 14.0, 14.1;<\/li>
      • Oracle\nRetail Service Backbone, versiones 14.1, 15.0, 16.0;<\/li>
      • Oracle\nRetail Xstore Point of Service, versiones 15.0.3, 16.0.5, 17.0.3, 18.0.2,\n19.0.1;<\/li>
      • Oracle\nSolaris, versiones 10, 11;<\/li>
      • Oracle\nTimesTen In-Memory Database, versiones anteriores a 11.2.2.8.49, 18.1.3.1.0, y\nanteriores a 18.1.4.1.0;<\/li>
      • Oracle\nTransportation Management, versi\u00f3n 6.3.7;<\/li>
      • Oracle\nUtilities Framework, versiones 2.2.0.0.0, 4.2.0.2.0, 4.2.0.3.0,\n4.3.0.1.0-4.3.0.6.0, 4.4.0.0.0, 4.4.0.2.0;<\/li>
      • Oracle\nVM VirtualBox, versiones anteriores a 6.1.16;<\/li>
      • Oracle\nWebCenter Portal, versiones 11.1.1.9.0, 12.2.1.3.0, 12.2.1.4.0;<\/li>
      • Oracle\nWebLogic Server, versiones 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0,\n14.1.1.0.0;<\/li>
      • Oracle\nZFS Storage Appliance Kit, versi\u00f3n 8.8;<\/li>
      • PeopleSoft\nEnterprise HCM Global Payroll Core, versi\u00f3n 9.2;<\/li>
      • PeopleSoft\nEnterprise PeopleTools, versiones 8.56, 8.57, 8.58;<\/li>
      • PeopleSoft\nEnterprise SCM eSupplier Connection, versi\u00f3n 9.2;<\/li>
      • Primavera\nGateway, versiones 16.2.0-16.2.11, 17.12.0-17.12.8;<\/li>
      • Primavera\nUnifier, versiones 16.1, 16.2, 17.7-17.12, 18.8, 19.12;<\/li>
      • Siebel\nApplications, versiones 20.7, 20.8.<\/li><\/ul>\n\n\n\n

        III. Referencia a soluciones, herramientas e\ninformaci\u00f3n<\/strong><\/strong><\/p>\n\n\n\n

        Aplicar los parches correspondientes seg\u00fan los\nproductos afectados, mediante el bolet\u00edn\nde seguridad publicado por Oracle, en el siguiente enlace: https:\/\/www.oracle.com\/security-alerts\/cpuoct2020.html\n<\/p>\n\n\n\n

        Fuentes:<\/strong><\/p>\n\n\n\n

        • Oracle. Oracle\nCritical Patch Update Advisory – October 2020. Recopilado en: https:\/\/www.oracle.com\/security-alerts\/cpuoct2020.html<\/li>
        • Instituto\nNacional de Ciberseguridad (INCIBE). 21 de octubre del 2020. Vulnerabilidades. Recopilado en: https:\/\/www.incibe-cert.es\/alerta-temprana\/avisos-seguridad\/actualizaciones-criticas-oracle-octubre-2020<\/li><\/ul>\n\n\n\n

          Informaci\u00f3n de contacto<\/strong>
          \nCSIRT PANAMA
          \nComputer Security Incident Response Team Autoridad Nacional para la Innovacion\nGubernamental
          \nE-Mail: info@cert.pa
          \nPhone: +507 520-CERT (2378)
          \nWeb: https:\/\/cert.pa
          \nTwitter: @CSIRTPanama
          \nKey ID: 16F2B124<\/p>\n","protected":false},"excerpt":{"rendered":"

          Gravedad: Alta                                                                                                    Fecha de publicaci\u00f3n: Octubre 29, 2020 \u00daltima revisi\u00f3n: Octubre 29, 2020 Portal: https:\/\/www.oracle.com\/ Sistemas Afectados: Diversas vulnerabilidades que afectan a todas las versiones de Oracle. Descripci\u00f3n Oracle ha publicado una actualizaci\u00f3n cr\u00edtica con…<\/p>\n","protected":false},"author":4,"featured_media":443,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[4],"tags":[],"class_list":["post-2414","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-avisos-de-seguridad"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/2414","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2414"}],"version-history":[{"count":1,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/2414\/revisions"}],"predecessor-version":[{"id":2415,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/2414\/revisions\/2415"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/media\/443"}],"wp:attachment":[{"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2414"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2414"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2414"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}