Rackspace Advisory for Oracle Applications
by Marc Nourani, Director, Incident Change Problem Management Operations, Rackspace Technology
Rackspace Technology is aware that Oracle recently published the following security vulnerabilities impacting Oracle’s GoldenGate, Fusion Middleware, Hyperion, and other products. One Oracle vulnerability addressed is CVE-2022-22965, otherwise known as the Spring4Shell vulnerability. Spring4Shell is a zero-day vulnerability that was first observed being exploited in April 2022, which allows threat actors to remotely execute code on Java Spring Framework web applications.
You can find more about these vulnerabilities via the Oracle Critical Patch Update Advisory: https://www.oracle.com/security-alerts/cpuapr2023.html
Rackspace engineers have performed an initial assessment and strongly recommend that customers review the advisories and ensure appropriate patches are installed.
Should you have any questions or require assistance in responding to these vulnerabilities, please contact a support Racker via https://www.rackspace.com/login.
Rackspace Response to November 2023 Microsoft Patch Tuesday Security Advisory
November 21st, 2023
Security Awareness Recommendation
September 28th, 2023
Active Geo-Replication for Azure SQL DBs and its failover
September 26th, 2023
Update: Decommission of TLS v1.0 and v1.1 - Rackspace Customer Identity API Endpoint
September 21st, 2023