# MA-1065.042024: MyCERT Advisory - Oracle Releases Critical Patch Update Advisory for April 2024

**Date:** 23 Apr 2024  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-1065.042024  
**Advisory ID:** MA-1065.042024

---

**1.0 Introduction**
Recently, Oracle released its quarterly Critical Patch Update Advisory for April 2024 to address vulnerabilities in multiple products.
**2.0 Impact**
A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system.
**3.0 Affected Products**
Please click on the links in the Patch Availability Document column below to access the documentation for patch availability information and installation instructions.
|  | --- | --- | **Affected Products and Versions** | **Patch Availability Document** | [Autonomous Health Framework, versions prior to 23.11.1, prior to 24.2](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixAHTF) | [Oracle Autonomous Health Framework](https://support.oracle.com/rs?type=doc&id=3000005.1) | [Management Cloud Engine, version 24.1.0.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Management Cloud Engine](https://support.oracle.com/rs?type=doc&id=3014201.1) | [MySQL Cluster, versions 7.5.33 and prior, 7.6.29 and prior, 8.0.36 and prior, 8.2.0 and prior, 8.3.0 and prior](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixMSQL) | [MySQL](https://support.oracle.com/rs?type=doc&id=3012582.1) | [MySQL Connectors, versions 8.3.0 and prior](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixMSQL) | [MySQL](https://support.oracle.com/rs?type=doc&id=3012582.1) | [MySQL Enterprise Backup, versions 8.0.36 and prior, 8.3.0 and prior](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixMSQL) | [MySQL](https://support.oracle.com/rs?type=doc&id=3012582.1) | [MySQL Enterprise Monitor, versions 8.0.37 and prior](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixMSQL) | [MySQL](https://support.oracle.com/rs?type=doc&id=3012582.1) | [MySQL Server, versions 8.0.36 and prior, 8.2.0 and prior, 8.3.0 and prior](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixMSQL) | [MySQL](https://support.oracle.com/rs?type=doc&id=3012582.1) | [OPatch, versions prior to 12.2.0.1.42](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixGLM) | [Global Lifecycle Management](https://support.oracle.com/rs?type=doc&id=3000005.1) | [OPatchAuto, versions prior to 12.2.0.1.42](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixGLM) | [Global Lifecycle Management](https://support.oracle.com/rs?type=doc&id=3000005.1) | [Oracle Access Manager, version 12.2.1.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle Agile PLM, version 9.3.6](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixSCP) | [Oracle Supply Chain Products](https://support.oracle.com/rs?type=doc&id=3013496.1) | [Oracle Agile Product Lifecycle Management for Process, version 6.2.4.2](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixSCP) | [Oracle Supply Chain Products](https://support.oracle.com/rs?type=doc&id=3013496.1) | [Oracle Application Testing Suite, version 13.3.0.1](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixEM) | [Oracle Enterprise Manager](https://support.oracle.com/rs?type=doc&id=3000006.1) | [Oracle Banking APIs, versions 19.1.0.0.0, 19.2.0.0.0, 21.1.0.0.0, 22.1.0.0.0, 22.2.0.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixIFLX) | [Contact Support](https://support.oracle.com/) | [Oracle Banking Branch, versions 14.5.0.0.0, 14.6.0.0.0, 14.7.0.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixIFLX) | [Contact Support](https://support.oracle.com/) | [Oracle Banking Cash Management, versions 14.5.0.0.0, 14.6.0.0.0, 14.7.0.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixIFLX) | [Contact Support](https://support.oracle.com/) | [Oracle Banking Deposits and Lines of Credit Servicing, version 2.12.0.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixIFLX) | [Oracle Banking Deposits and Lines of Credit Servicing](https://support.oracle.com/rs?type=doc&id=3012768.1) | [Oracle Banking Digital Experience, versions 19.1.0.0.0, 19.2.0.0.0, 21.1.0.0.0, 22.1.0.0.0, 22.2.0.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixIFLX) | [Contact Support](https://support.oracle.com/) | [Oracle Banking Enterprise Default Management, versions 2.7.0.0.0, 2.12.0.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixIFLX) | [Oracle Banking Platform](https://support.oracle.com/rs?type=doc&id=3012768.1) | [Oracle Banking Liquidity Management, versions 14.5.0.0.0, 14.6.0.0.0, 14.7.0.0.0, 14.7.0.3.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixIFLX) | [Contact Support](https://support.oracle.com/) | [Oracle Banking Loans Servicing, version 2.12.0.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixIFLX) | [Oracle Banking Platform](https://support.oracle.com/rs?type=doc&id=3012768.1) | [Oracle Banking Origination, versions 14.5.0.0.0, 14.6.0.0.0, 14.7.0.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixIFLX) | [Contact Support](https://support.oracle.com/) | [Oracle Banking Party Management, version 2.7.0.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixIFLX) | [Oracle Banking Platform](https://support.oracle.com/rs?type=doc&id=3012768.1) | [Oracle Banking Platform, versions 2.7.0.0.0, 2.12.0.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixIFLX) | [Oracle Banking Platform](https://support.oracle.com/rs?type=doc&id=3012768.1) | [Oracle Banking Virtual Account Management, versions 14.5.0.0.0, 14.6.0.0.0, 14.7.0.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixIFLX) | [Contact Support](https://support.oracle.com/) | [Oracle BI Publisher, versions 7.0.0.0.0, 12.2.1.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixANLY) | [Oracle Analytics](https://support.oracle.com/rs?type=doc&id=3011311.2) | [Oracle Big Data Spatial and Graph, version 3.0.5](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixBGDG) | [Database](https://support.oracle.com/rs?type=doc&id=3000005.1) | [Oracle Business Intelligence Enterprise Edition, versions 7.0.0.0.0, 12.2.1.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixANLY) | [Oracle Analytics](https://support.oracle.com/rs?type=doc&id=3011311.2) | [Oracle Coherence, versions 12.2.1.4.0, 14.1.1.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle Commerce Guided Search, version 11.3.2](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixOCOM) | [Oracle Commerce](https://support.oracle.com/rs?type=doc&id=3013472.1) | [Oracle Commerce Platform, versions 11.3.0, 11.3.1, 11.3.2](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixOCOM) | [Oracle Commerce](https://support.oracle.com/rs?type=doc&id=3013472.1) | [Oracle Communications Billing and Revenue Management, versions 12.0.0.4-12.0.0.8, 15.0.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCAGBU) | [Oracle Communications Billing and Revenue Management](https://support.oracle.com/rs?type=doc&id=3012555.1) | [Oracle Communications BRM - Elastic Charging Engine, versions 12.0.0.4-12.0.0.8, 15.0.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCAGBU) | [Oracle Communications BRM - Elastic Charging Engine](https://support.oracle.com/rs?type=doc&id=3012531.1) | [Oracle Communications Cloud Native Core Binding Support Function, versions 23.4.0-23.4.2](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle Communications Cloud Native Core Binding Support Function](https://support.oracle.com/rs?type=doc&id=3014186.1) | [Oracle Communications Cloud Native Core Console, version 23.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle Communications Cloud Native Core Console](https://support.oracle.com/rs?type=doc&id=3014187.1) | [Oracle Communications Cloud Native Core Network Data Analytics Function, version 24.1.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle Communications Cloud Native Core Network Data Analytics Function](https://support.oracle.com/rs?type=doc&id=3014203.1) | [Oracle Communications Cloud Native Core Network Exposure Function, version 23.4.1](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle Communications Cloud Native Core Network Exposure Function](https://support.oracle.com/rs?type=doc&id=3014197.1) | [Oracle Communications Cloud Native Core Network Function Cloud Native Environment, versions 23.2.0, 23.3.1, 23.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle Communications Cloud Native Core Network Function Cloud Native Environment](https://support.oracle.com/rs?type=doc&id=3014188.1) | [Oracle Communications Cloud Native Core Network Repository Function, version 23.4.1](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle Communications Cloud Native Core Network Repository Function](https://support.oracle.com/rs?type=doc&id=3014198.1) | [Oracle Communications Cloud Native Core Network Slice Selection Function, versions 23.2.0, 23.3.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle Communications Cloud Native Core Network Slice Selection Function](https://support.oracle.com/rs?type=doc&id=3014189.1) | [Oracle Communications Cloud Native Core Policy, versions 23.4.0-23.4.2](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle Communications Cloud Native Core Policy](https://support.oracle.com/rs?type=doc&id=3014190.1) | [Oracle Communications Cloud Native Core Security Edge Protection Proxy, versions 23.3.0, 23.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle Communications Cloud Native Core Security Edge Protection Proxy](https://support.oracle.com/rs?type=doc&id=3014191.1) | [Oracle Communications Cloud Native Core Service Communication Proxy, versions 23.1.0, 23.2.2, 23.3.0, 23.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle Communications Cloud Native Core Service Communication Proxy](https://support.oracle.com/rs?type=doc&id=3014192.1) | [Oracle Communications Cloud Native Core Unified Data Repository, versions 22.4.0, 23.1.0, 23.2.0, 23.3.2](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle Communications Cloud Native Core Unified Data Repository](https://support.oracle.com/rs?type=doc&id=3014196.1) | [Oracle Communications Diameter Signaling Router, version 9.0.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle Communications Diameter Signaling Router](https://support.oracle.com/rs?type=doc&id=3014176.1) | [Oracle Communications Element Manager, versions 9.0.0-9.0.2](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle Communications Element Manager](https://support.oracle.com/rs?type=doc&id=3014179.1) | [Oracle Communications Fraud Monitor, versions 5.0, 5.1, 5.2](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle Communications Fraud Monitor](https://support.oracle.com/rs?type=doc&id=3014199.1) | [Oracle Communications Network Integrity, version 7.3.6.4](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCAGBU) | [Oracle Communications Network Integrity](https://support.oracle.com/rs?type=doc&id=3012566.1) | [Oracle Communications Offline Mediation Controller, versions 12.0.0.1-12.0.0.8](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCAGBU) | [Oracle Communications Offline Mediation Controller](https://support.oracle.com/rs?type=doc&id=3012567.1) | [Oracle Communications Operations Monitor, versions 5.0, 5.1, 5.2](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle Communications Operations Monitor](https://support.oracle.com/rs?type=doc&id=3014202.1) | [Oracle Communications Service Catalog and Design, version 8.0.0.1.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCAGBU) | [Oracle Communications Service Catalog and Design](https://support.oracle.com/rs?type=doc&id=3012565.1) | [Oracle Communications Session Report Manager, versions 9.0.0-9.0.2](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle Communications Session Report Manager](https://support.oracle.com/rs?type=doc&id=3014180.1) | [Oracle Communications Unified Inventory Management, versions 7.4.0-7.4.2, 7.5.0, 7.5.1](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCAGBU) | [Oracle Communications Unified Inventory Management](https://support.oracle.com/rs?type=doc&id=3012534.1) | [Oracle Communications User Data Repository, version 14.0.0.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle Communications User Data Repository](https://support.oracle.com/rs?type=doc&id=3015461.1) | [Oracle Communications WebRTC Session Controller, versions 7.2.0.0.0-7.2.1.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle Communications WebRTC Session Controller](https://support.oracle.com/rs?type=doc&id=3014177.1) | [Oracle Data Integrator, version 12.2.1.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle Database Server, versions 19.3-19.22, 21.3-21.13](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixDB) | [Database](https://support.oracle.com/rs?type=doc&id=3000005.1) | [Oracle Documaker, versions 12.6, 12.7](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixINSU) | [Oracle Insurance Applications](https://support.oracle.com/rs?type=doc&id=3013639.1) | [Oracle E-Business Suite, versions 12.2.3-12.2.13](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixEBS) | [Oracle E-Business Suite](https://support.oracle.com/rs?type=doc&id=2484000.1) | [Oracle Enterprise Data Quality, version 12.2.1.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle Enterprise Manager Base Platform, version 13.5.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixEM) | [Oracle Enterprise Manager](https://support.oracle.com/rs?type=doc&id=3000006.1) | [Oracle Enterprise Manager for Fusion Middleware, version 13.5.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixEM) | [Oracle Enterprise Manager](https://support.oracle.com/rs?type=doc&id=3000006.1) | [Oracle Essbase, version 21.5.4.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixESSB) | [Database](https://support.oracle.com/rs?type=doc&id=3000005.1) | [Oracle Financial Services Revenue Management and Billing, versions 2.8.0.0.0, 2.9.0.0.0, 2.9.0.1.0, 3.0.0.0.0, 3.1.0.0.0, 3.2.0.0.0, 4.0.0.0, 5.0.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixIFLX) | [Oracle Financial Services Revenue Management and Billing](https://support.oracle.com/rs?type=doc&id=3012792.1) | [Oracle FLEXCUBE Private Banking, version 12.1.0.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixIFLX) | [Contact Support](https://support.oracle.com/) | [Oracle Fusion Middleware MapViewer, version 12.2.1.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle Global Lifecycle Management NextGen OUI Framework, version 12.2.1.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle GoldenGate, versions 19.1.0.0.0-19.22.0.0.240124, 21.3-21.13](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixGG) | [Database](https://support.oracle.com/rs?type=doc&id=3000005.1) | [Oracle GoldenGate Stream Analytics, versions 19.1.0.0.0-19.1.0.0.8](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixGG) | [Database](https://support.oracle.com/rs?type=doc&id=3000005.1) | [Oracle GoldenGate Studio, version 12.2.0.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixGG) | [Database](https://support.oracle.com/rs?type=doc&id=3000005.1) | [Oracle GoldenGate Veridata, versions 12.2.1.4.0-12.2.1.4.230922](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixGG) | [Database](https://support.oracle.com/rs?type=doc&id=3000005.1) | [Oracle GraalVM Enterprise Edition, versions 20.3.13, 21.3.9](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixJAVA) | [Java SE](https://support.oracle.com/rs?type=doc&id=3012587.1) | [Oracle GraalVM for JDK, versions 17.0.10, 21.0.2, 22](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixJAVA) | [Java SE](https://support.oracle.com/rs?type=doc&id=3012587.1) | [Oracle Healthcare Data Repository, versions 8.1.0.0, 8.1.1.0, 8.1.2.0, 8.1.3.0, 8.1.3.2, 8.1.3.4](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixHC) | [HealthCare Applications](https://support.oracle.com/rs?type=doc&id=3012568.1) | [Oracle Hospitality Cruise Shipboard Property Management System, versions 20.3.3, 20.3.4, 23.1.0, 23.1.1](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixHOSP) | [Oracle Hospitality Cruise Shipboard Property Management System](https://support.oracle.com/rs?type=doc&id=3011327.1) | [Oracle Hospitality Simphony, versions 19.1.0-19.5.4](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFBBU) | [Oracle Hospitality Simphony](https://support.oracle.com/rs?type=doc&id=3009811.1) | [Oracle HTTP Server, version 12.2.1.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle Hyperion Infrastructure Technology, version 11.2.16.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixHYP) | [Oracle Enterprise Performance Management](https://support.oracle.com/rs?type=doc&id=2775466.2) | [Oracle Identity Manager, version 12.2.1.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle Identity Manager Connector, version 12.2.1.3.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle Internet Directory, version 12.2.1.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle Java SE, versions 8u401, 8u401-perf, 11.0.22, 17.0.10, 21.0.2, 22](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixJAVA) | [Java SE](https://support.oracle.com/rs?type=doc&id=3012587.1) | [Oracle Life Sciences Empirica Signal, versions 9.1.0.53, 9.2.0.53](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixHCAR) | [Health Sciences](https://support.oracle.com/rs?type=doc&id=3012663.1) | [Oracle Managed File Transfer, version 12.2.1.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle Middleware Common Libraries and Tools, versions 12.2.1.4.0, 14.1.1.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle Outside In Technology, versions 8.5.6, 8.5.7](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle Retail Assortment Planning, versions 15.0.3, 16.0.3](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixRAPP) | [Retail Applications](https://support.oracle.com/rs?type=doc&id=3009818.1) | [Oracle Retail Customer Management and Segmentation Foundation, version 19.0.0.9](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixRAPP) | [Retail Applications](https://support.oracle.com/rs?type=doc&id=3009818.1) | [Oracle Retail Integration Bus, versions 14.1.3.2, 15.0.3.1, 16.0.3, 19.0.1](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixRAPP) | [Retail Applications](https://support.oracle.com/rs?type=doc&id=3009818.1) | [Oracle Retail Merchandising System, versions 14.1.3, 15.0.3, 16.0.3, 19.0.1](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixRAPP) | [Retail Applications](https://support.oracle.com/rs?type=doc&id=3009818.1) | [Oracle Retail Sales Audit, versions 14.1.3.1, 15.0.3.1, 16.0.3, 19.0.1](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixRAPP) | [Retail Applications](https://support.oracle.com/rs?type=doc&id=3009818.1) | [Oracle Retail Service Backbone, versions 14.1.3.2, 15.0.3.1, 16.0.3, 19.0.1](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixRAPP) | [Retail Applications](https://support.oracle.com/rs?type=doc&id=3009818.1) | [Oracle Retail Xstore Point of Service, versions 19.0.5, 20.0.4, 21.0.3, 22.0.1, 23.0.1](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixRAPP) | [Retail Applications](https://support.oracle.com/rs?type=doc&id=3009818.1) | [Oracle SD-WAN Edge, version 9.1.1.7.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixCGBU) | [Oracle SD-WAN Edge](https://support.oracle.com/rs?type=doc&id=3014178.1) | [Oracle Smart View for Office, version 11.2.16.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixHYP) | [Oracle Enterprise Performance Management](https://support.oracle.com/rs?type=doc&id=2775466.2) | [Oracle SOA Suite, version 12.2.1.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle Solaris, version 11](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixSUNS) | [Systems](https://support.oracle.com/rs?type=doc&id=3014318.1) | [Oracle Solaris Cluster, version 4](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixSUNS) | [Systems](https://support.oracle.com/rs?type=doc&id=3014318.1) | [Oracle StorageTek Tape Analytics (STA), version 2.5](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixSUNS) | [Systems](https://support.oracle.com/rs?type=doc&id=3014318.1) | [Oracle TimesTen In-Memory Database, versions prior to 22.1, prior to 22.1.1.19.0, prior to 22.1.1.23.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixXTEN) | [Database](https://support.oracle.com/rs?type=doc&id=3000005.1) | [Oracle Transportation Management, versions 6.5.2, 6.5.3](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixSCP) | [Oracle Supply Chain Products](https://support.oracle.com/rs?type=doc&id=3013496.1) | [Oracle Utilities Application Framework, versions 4.3.0.3.0-4.3.0.6.0, 4.4.0.0.0, 4.4.0.2.0, 4.4.0.3.0, 4.5.0.0.0, 4.5.0.1.1, 4.5.0.1.2](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixUTIL) | [Oracle Utilities Applications](https://support.oracle.com/rs?type=doc&id=3013490.1) | [Oracle Utilities Network Management System, versions 2.3.0.2, 2.4.0.1, 2.5.0.1, 2.5.0.2, 2.6.0.0, 2.6.0.0.4, 2.6.0.1](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixUTIL) | [Oracle Utilities Applications](https://support.oracle.com/rs?type=doc&id=3013490.1) | [Oracle VM VirtualBox, versions prior to 7.0.16](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixOVIR) | [Virtualization](https://support.oracle.com/rs?type=doc&id=3014516.1) | [Oracle Web Services Manager, version 12.2.1.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle WebCenter Content, version 12.2.1.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle WebCenter Enterprise Capture, version 12.2.1.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle WebCenter Portal, version 12.2.1.4.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle WebLogic Server, versions 12.2.1.4.0, 14.1.1.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle Weblogic Server Proxy Plug-in, versions 12.2.1.4.0, 14.1.1.0.0](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixFMW) | [Fusion Middleware](https://support.oracle.com/rs?type=doc&id=3011291.2) | [Oracle ZFS Storage Appliance Kit, version 8.8](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixSUNS) | [Systems](https://support.oracle.com/rs?type=doc&id=3014318.1) | [OSS Support Tools, versions 2.12.44, 2.12.45, 23.1.23.1.17, 24.1.24.1.16](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixTOOL) | [Oracle Support Tools](https://support.oracle.com/rs?type=doc&id=3014515.1) | [PeopleSoft Enterprise CRM Client Management, version 9.2](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixPS) | [PeopleSoft](https://support.oracle.com/rs?type=doc&id=3013474.1) | [PeopleSoft Enterprise HCM Benefits Administration, version 9.2](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixPS) | [PeopleSoft](https://support.oracle.com/rs?type=doc&id=3013474.1) | [PeopleSoft Enterprise PeopleTools, versions 8.59, 8.60, 8.61](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixPS) | [PeopleSoft](https://support.oracle.com/rs?type=doc&id=3013474.1) | [Primavera Gateway, versions 19.12.0-19.12.18, 20.12.0-20.12.13, 21.12.0-21.12.11](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixPVA) | [Oracle Construction and Engineering Suite](https://support.oracle.com/rs?type=doc&id=3010844.1) | [Primavera P6 Enterprise Project Portfolio Management, versions 19.12.0-19.12.22, 20.12.0-20.12.21, 21.12.0-21.12.18, 22.12.0-22.12.12, 23.12.0-23.12.2](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixPVA) | [Oracle Construction and Engineering Suite](https://support.oracle.com/rs?type=doc&id=3010844.1) | [Primavera Unifier, versions 19.12.0-19.12.16, 20.12.0-20.12.16, 21.12.0-21.12.17, 22.12.0-22.12.12, 23.12.0-23.12.3](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixPVA) | [Oracle Construction and Engineering Suite](https://support.oracle.com/rs?type=doc&id=3010844.1) | [Siebel Applications, versions 24.2 and prior](https://www.oracle.com/security-alerts/cpuapr2024.html#AppendixSECR) | [Siebel](https://support.oracle.com/rs?type=doc&id=3013495.1) |
**4.0 Recommendations**
CyberSecurity Malaysia encourages users and administrators to review [Oracle’s April 2024 Critical Patch Update Advisory](https://www.oracle.com/security-alerts/cpuapr2024.html) and apply the necessary updates.
Kindly refer to the following URL for more information: <https://www.oracle.com/security-alerts/cpuapr2024.html>
Generally, we advise users to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact the Cyber999 Incident Response Team through the following channels:
E-mail: cyber999[at]cybersecurity.my 
Phone: 1-300-88-2999 (monitored during business hours) 
Mobile: +60 19 2665850 (24x7 call incident reporting) 
Business Hours: Mon - Fri 08:30 -17:30 MYT 
Web: [https://www.mycert.org.my](https://www.mycert.org.my/) 
Twitter: <https://twitter.com/mycert> 
Facebook: <https://www.facebook.com/mycert.org.my>
**5.0    References**
- <https://www.oracle.com/security-alerts/cpuapr2024.html>
- <https://www.cisa.gov/news-events/alerts/2024/04/18/oracle-releases-critical-patch-update-advisory-april-2024>