CSIRT Panam\u00e1 Aviso 2021-10-25 Oracle: Actualizaciones cr\u00edticas en Oracle (octubre 2021)<\/p>\n\n\n\n
Gravedad: Alta
Fecha de publicaci\u00f3n: Octubre 25, 2021
\u00daltima revisi\u00f3n: Octubre 25, 2021
Sitio web: https:\/\/www.oracle.com\/
Sistemas Afectados:<\/p>\n\n\n\n
\u2022 Enterprise Manager Base Platform, versiones 13.4.0.0 y 13.5.0.0;
\u2022 Enterprise Manager for Oracle Database, versi\u00f3n 13.4.0.0;
\u2022 Enterprise Manager Ops Center, versi\u00f3n 12.4.0.0;
\u2022 Essbase Administration Services, versiones anteriores a 11.1.2.4.46;
\u2022 Hyperion Financial Management, versiones 11.1.2.4 y 11.2.6.0;
\u2022 Hyperion Financial Reporting, versiones 11.1.2.4 y 11.2.6.0;
\u2022 Hyperion Infrastructure Technology, versi\u00f3n 11.2.6.0;
\u2022 Hyperion Planning, versiones 11.1.2.4 y 11.2.6.0;
\u2022 Instantis EnterpriseTrack, versiones 17.1, 17.2 y 17.3;
\u2022 JD Edwards EnterpriseOne Orchestrator, versiones anteriores a 9.2.6.0;
\u2022 JD Edwards EnterpriseOne Tools, versiones anteriores a 9.2.6.0;
\u2022 JD Edwards World Security, versi\u00f3n A9.4;
\u2022 MySQL Client, versiones 8.0.26 y anteriores;
\u2022 MySQL Cluster, versiones 7.4.33 y anteriores, 7.5.23 y anteriores, 7.6.19 y anteriores, 8.0.26 y anteriores;
\u2022 MySQL Connectors, versiones 8.0.26 y anteriores;
\u2022 MySQL Enterprise Monitor, versiones 8.0.25 y anteriores;
\u2022 MySQL Server, versiones 5.7.35 y anteriores, 8.0.26 y anteriores;
\u2022 MySQL Workbench, versiones 8.0.26 y anteriores;
\u2022 Oracle Agile PLM, versiones 9.3.3 y 9.3.6;
\u2022 Oracle Application Express, versiones anteriores a 21.1.0;
\u2022 Oracle Application Testing Suite, versi\u00f3n 13.3.0.1;
\u2022 Oracle Autovue for Agile Product Lifecycle Management, versi\u00f3n 21.0.2;
\u2022 Oracle Banking Cash Management, versiones 14.2, 14.3 y 14.5;
\u2022 Oracle Banking Corporate Lending Process Management, versiones 14.2, 14.3 y 14.5;
\u2022 Oracle Banking Credit Facilities Process Management, versiones 14.2, 14.3 y 14.5;
\u2022 Oracle Banking Enterprise Default Management, versiones 2.10.0 y 2.12.0;
\u2022 Oracle Banking Extensibility Workbench, versiones 14.2, 14.3 y 14.5;
\u2022 Oracle Banking Platform, versiones 2.6.2, 2.7.1, 2.9.0 y 2.12.0;
\u2022 Oracle Banking Supply Chain Finance, versiones 14.2, 14.3 y 14.5;
\u2022 Oracle Banking Trade Finance Process Management, versiones 14.2, 14.3 y 14.5;
\u2022 Oracle Banking Virtual Account Management, versiones 14.2, 14.3 y 14.5;
\u2022 Oracle Business Activity Monitoring, versiones 11.1.1.9.0, 12.2.1.3.0 y 12.2.1.4.0;
\u2022 Oracle Business Intelligence Enterprise Edition, versiones 5.5.0.0.0, 12.2.1.3.0 y 12.2.1.4.0;
\u2022 Oracle Commerce Guided Search, versi\u00f3n 11.3.2;
\u2022 Oracle Commerce Merchandising, versi\u00f3n 11.3.2;
\u2022 Oracle Communications Application Session Controller, versi\u00f3n 3.9;
\u2022 Oracle Communications Billing y Revenue Management, versiones 7.5.0.0.0 y 12.0.0.3.0;
\u2022 Oracle Communications BRM – Elastic Charging Engine, versi\u00f3n 12.0.0.3;
\u2022 Oracle Communications Calendar Server, versi\u00f3n 8.0.0.6.0;
\u2022 Oracle Communications Cloud Native Core Network Repository Function, versi\u00f3n 1.14.0;
\u2022 Oracle Communications Cloud Native Core Policy, versi\u00f3n 1.11.0;
\u2022 Oracle Communications Control Plane Monitor, versiones 3.4, 4.2, 4.3 y 4.4;
\u2022 Oracle Communications Converged Application Server – Service Controller, versi\u00f3n 6.2;
\u2022 Oracle Communications Design Studio, versi\u00f3n 7.4.2;
\u2022 Oracle Communications Diameter Signaling Router, versiones 8.0.0.0-8.5.0.0;
\u2022 Oracle Communications EAGLE;
\u2022 Oracle Communications EAGLE FTP Table Base Retrieval, versi\u00f3n 4.5;
\u2022 Oracle Communications EAGLE LNP Application Processor, versiones 46.7, 46.8 y 46.9;
\u2022 Oracle Communications Element Manager, versiones 8.2.0.0-8.2.4.0;
\u2022 Oracle Communications Fraud Monitor, versiones 3.4-4.4;
\u2022 Oracle Communications Interactive Session Recorder, versi\u00f3n 6.4;
\u2022 Oracle Communications LSMS, versiones 13.1-13.4;
\u2022 Oracle Communications Messaging Server, versi\u00f3n 8.1;
\u2022 Oracle Communications MetaSolv Solution, versi\u00f3n 6.3.1;
\u2022 Oracle Communications Offline Mediation Controller, versi\u00f3n 12.0.0.3.0;
\u2022 Oracle Communications Operations Monitor, versiones 3.4, 4.2, 4.3 y 4.4;
\u2022 Oracle Communications Policy Management, versi\u00f3n 12.5.0;
\u2022 Oracle Communications Pricing Design Center, versi\u00f3n 12.0.0.3.0;
\u2022 Oracle Communications Services Gatekeeper, versi\u00f3n 7.0;
\u2022 Oracle Communications Session Border Controller, versiones 8.4 y 9.0;
\u2022 Oracle Communications Session Report Manager, versiones 8.0.0.0-8.2.5.0;
\u2022 Oracle Communications Session Route Manager, versiones 8.0.0.0-8.2.5.0;
\u2022 Oracle Data Integrator, versi\u00f3n 12.2.1.4.0;
\u2022 Oracle Database Server, versiones 12.1.0.2, 12.2.0.1, 19c y 21c;
\u2022 Oracle Documaker, versiones 12.6.0-12.6.4;
\u2022 Oracle E-Business Suite, versiones 12.1.1-12.1.3 y 12.2.3-12.2.10;
\u2022 Oracle Enterprise Communications Broker, versiones 3.2 y 3.3;
\u2022 Oracle Enterprise Repository, versi\u00f3n 11.1.1.7.0;
\u2022 Oracle Enterprise Telephony Fraud Monitor, versiones 3.4, 4.2, 4.3 y 4.4;
\u2022 Oracle Ethernet Switch ES2-64, Oracle Ethernet Switch ES2-72, versi\u00f3n 2.0.0.14;
\u2022 Oracle Financial Services Analytical Applications Infrastructure, versiones 8.0.6-8.1.1;
\u2022 Oracle Financial Services Enterprise Case Management, versiones 8.0.7.2.0 y 8.0.8.1.0;
\u2022 Oracle Financial Services Model Management y Governance, versiones 8.0.8.0.0-8.1.0.0.0;
\u2022 Oracle FLEXCUBE Core Banking, versiones 11.7, 11.8, 11.9 y 11.10;
\u2022 Oracle Global Lifecycle Management OPatch;
\u2022 Oracle GoldenGate, versiones anteriores a 19.1.0.0.0.210420;
\u2022 Oracle GoldenGate Application Adapters, versi\u00f3n 19.1.0.0.0;
\u2022 Oracle GraalVM Enterprise Edition, versiones 20.3.3 y 21.2.0;
\u2022 Oracle Graph Server y Client, versiones anteriores a 21.3.0;
\u2022 Oracle Health Sciences Central Coding, versiones 6.2.0 y 6.3.0;
\u2022 Oracle Health Sciences InForm, versi\u00f3n 6.3.0;
\u2022 Oracle Healthcare Data Repository, versiones 7.0.2 y 8.1.0;
\u2022 Oracle Healthcare Foundation, versiones 7.3, 8.0 y 8.1;
\u2022 Oracle Hospitality Cruise Shipboard Property Management System, versi\u00f3n 20.1.0;
\u2022 Oracle HTTP Server, versiones 11.1.1.9.0 y 12.2.1.4.0;
\u2022 Oracle Insurance Calculation Engine, versiones 11.0.0-11.3.1;
\u2022 Oracle Insurance Policy Administration, versiones 11.0.0-11.3.1;
\u2022 Oracle Java SE, versiones 7u311, 8u301, 11.0.12 y 17;
\u2022 Oracle NoSQL Database;
\u2022 Oracle Outside In Technology, versi\u00f3n 8.5.5;
\u2022 Oracle Real User Experience Insight, versiones 13.4.1.0 y 13.5.1.0;
\u2022 Oracle Real-Time Decision Server, versiones 3.2.0.0 y 11.1.1.9.0;
\u2022 Oracle REST Data Services, versiones anteriores a 21.3;
\u2022 Oracle Retail Advanced Inventory Planning, versiones 14.1, 15.0 y 16.0;
\u2022 Oracle Retail Assortment Planning, versi\u00f3n 16.0;
\u2022 Oracle Retail Back Office, versiones 14.0 y 14.1;
\u2022 Oracle Retail Bulk Data Integration, versiones 16.0.3 y 19.0.1;
\u2022 Oracle Retail Central Office, versiones 14.0 y 14.1;
\u2022 Oracle Retail Customer Management y Segmentation Foundation, versiones 16.0-19.0;
\u2022 Oracle Retail Extract Transform y Load, versi\u00f3n 13.2.8;
\u2022 Oracle Retail Financial Integration, versiones 14.1.3.2, 15.0.4.0 y 16.0.3.0;
\u2022 Oracle Retail Integration Bus, versiones 14.1.3.2, 15.0.4.0, 16.0.3.0 y 19.0.1.0;
\u2022 Oracle Retail Merchandising System, versiones 15.0.3 y 19.0.1;
\u2022 Oracle Retail Point-of-Service, versiones 14.0 y 14.1;
\u2022 Oracle Retail Predictive Application Server, versiones 14.1.3, 15.0.3 y 16.0.3;
\u2022 Oracle Retail Returns Management, versiones 14.0 y 14.1;
\u2022 Oracle Retail Service Backbone, versiones 14.1.3.2, 15.0.4.0, 16.0.3.0 y 19.0.1.0;
\u2022 Oracle Retail Store Inventory Management, versiones 14.1, 15.0 y 16.0;
\u2022 Oracle Secure Backup, versiones anteriores a 18.1.0.1.0;
\u2022 Oracle Secure Global Desktop, versi\u00f3n 5.6;
\u2022 Oracle Solaris, versi\u00f3n 11;
\u2022 Oracle Spatial Studio;
\u2022 Oracle SQL Developer;
\u2022 Oracle Transportation Management, versi\u00f3n 6.4.3;
\u2022 Oracle Utilities Framework, versiones 4.2.0.2.0, 4.2.0.3.0, 4.3.0.1.0-4.3.0.6.0, 4.4.0.0.0, 4.4.0.2.0 y 4.4.0.3.0;
\u2022 Oracle VM VirtualBox, versiones anteriores a 6.1.28;
\u2022 Oracle WebCenter Portal, versiones 12.2.1.3.0 y 12.2.1.4.0;
\u2022 Oracle WebCenter Sites, versiones 12.2.1.3.0 y 12.2.1.4.0;
\u2022 Oracle WebLogic Server, versiones 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0 y 14.1.1.0.0;
\u2022 Oracle WebLogic Server Proxy Plug-In, versiones 12.2.1.3.0 y 12.2.1.4.0;
\u2022 Oracle ZFS Storage Appliance Kit, versi\u00f3n 8.8;
\u2022 PeopleSoft Enterprise CC Common Application Objects, versi\u00f3n 9.2;
\u2022 PeopleSoft Enterprise CS Academic Advisement, versi\u00f3n 9.2;
\u2022 PeopleSoft Enterprise CS Campus Community, versiones 9.0 y 9.2;
\u2022 PeopleSoft Enterprise CS SA Integration Pack, versiones 9.0 y 9.2;
\u2022 PeopleSoft Enterprise CS Student Records, versi\u00f3n 9.2;
\u2022 PeopleSoft Enterprise PeopleTools, versiones 8.57, 8.58 y 8.59;
\u2022 PeopleSoft Enterprise SCM, versi\u00f3n 9.2;
\u2022 Primavera Gateway, versiones 17.12.0-17.12.11, 18.8.0-18.8.12, 19.12.0-19.12.11 y 20.12.0-20.12.7;
\u2022 Primavera Unifier, versiones 17.7-17.12, 18.8, 19.12 y 20.12;
\u2022 Siebel Applications, versiones 21.9 y anteriores;
\u2022 Tekelec Platform Distribution, versiones 7.4.0-7.7.1;
\u2022 Tekelec Virtual Operating Environment, versiones 3.4.0-3.7.1.<\/p>\n\n\n\n
I. Descripci\u00f3n<\/p>\n\n\n\n
Oracle ha publicado una actualizaci\u00f3n cr\u00edtica con parches para corregir 419 vulnerabilidades que afectan a m\u00faltiples productos.<\/p>\n\n\n\n
II. Impacto<\/p>\n\n\n\n
El detalle de las vulnerabilidades resueltas se puede consultar en el enlace de Oracle de la secci\u00f3n de \u2018Referencias\u2019.<\/p>\n\n\n\n
III. Referencia a soluciones, herramientas e informaci\u00f3n<\/p>\n\n\n\n
Aplicar los parches correspondientes seg\u00fan los productos afectados, desde el sitio oficial de Oracle. (https:\/\/www.oracle.com\/security-alerts\/cpuoct2021.html)<\/p>\n\n\n\n
Fuentes:<\/p>\n\n\n\n
Informaci\u00f3n de contacto
CSIRT PANAMA
Computer Security Incident Response Team Autoridad Nacional para la Innovacion Gubernamental
E-Mail: info@cert.pa
Phone: +507 520-CERT (2378)
Web: https:\/\/cert.pa
Twitter: @CSIRTPanama
Key ID: 16F2B124<\/p>\n","protected":false},"excerpt":{"rendered":"
CSIRT Panam\u00e1 Aviso 2021-10-25 Oracle: Actualizaciones cr\u00edticas en Oracle (octubre 2021) Gravedad: AltaFecha de publicaci\u00f3n: Octubre 25, 2021\u00daltima revisi\u00f3n: Octubre 25, 2021Sitio web: https:\/\/www.oracle.com\/Sistemas Afectados: \u2022 Enterprise Manager Base Platform, versiones 13.4.0.0 y 13.5.0.0;\u2022 Enterprise…<\/p>\n","protected":false},"author":4,"featured_media":443,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[4],"tags":[72,37,73,68],"class_list":["post-2920","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-avisos-de-seguridad","tag-avisos-de-seguridad","tag-oracle","tag-parches","tag-vulnerabilidades"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/2920","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/users\/4"}],"replies":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=2920"}],"version-history":[{"count":1,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/2920\/revisions"}],"predecessor-version":[{"id":2921,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/posts\/2920\/revisions\/2921"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=\/wp\/v2\/media\/443"}],"wp:attachment":[{"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=2920"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=2920"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cert.pa\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=2920"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}