Loading story…
Oracle’s April 2017 Critical Patch Update addressed CVE-2017-3599, a remotely exploitable, pre-authentication denial-of-service vulnerability in MySQL. An unauthenticated attacker could send crafted network traffic to an exposed MySQL service and cause it to become unavailable, affecting database-backed applications and dependent business services.
Organizations running affected Oracle MySQL deployments should apply the relevant Oracle CPU updates, prioritize internet- or partner-accessible database servers, and restrict MySQL network exposure to authorized hosts. Security teams should also monitor for abnormal or malformed connection activity and validate service availability after patching.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
Oracle issued its Critical Patch Update Advisory for April 2017.
SECFORCE documented CVE-2017-3599, describing a pre-authentication remote denial-of-service issue affecting MySQL.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Oracle released its June 2026 Critical Patch Update with **245 security patches** affecting multiple Oracle products and third-party components. The vulnerabilities addressed could allow denial-of-service attacks, sensitive information disclosure, data manipulation, and unauthorized access, prompting guidance for enterprises to apply updates after completing testing. The update includes two maximum-severity flaws rated **CVSS 10.0**: **`CVE-2026-35308`** in **Oracle Coherence**, described as a remotely exploitable centralized takeover issue, and **`CVE-2026-46978`** in **Oracle Solaris**, described as a data manipulation vulnerability. Both flaws are reported as exploitable over the network with low attack complexity, requiring no privileges and no user interaction, increasing the urgency for organizations running affected systems to patch quickly.
Jul 9, 2026
Oracle released its January 2026 *Critical Patch Update (CPU)*, delivering **337 security updates addressing 158 unique CVEs** across roughly 30 product families; **27** of the updates were rated **critical**. Tenable’s analysis highlights broad exposure to remotely exploitable issues without authentication across multiple Oracle product lines, and notes **CVE-2026-21945**, a high-severity **SSRF** issue in Oracle Java, was discovered by Tenable Research. A standout issue in the CPU is **CVE-2026-21962** (CVSS **10.0**), an **easily exploitable, unauthenticated, network-reachable (HTTP)** vulnerability in Oracle Fusion Middleware components **Oracle HTTP Server** and the **WebLogic Server Proxy Plug-ins** (Apache and IIS). Successful exploitation can enable **unauthorized creation, deletion, or modification of critical data** and potentially broader downstream impact due to a **scope change** (`S:C`), meaning compromise may significantly affect additional products; affected versions include **12.2.1.4.0**, **14.1.1.0.0**, and **14.1.2.0.0** (with the IIS proxy plug-in affected in **12.2.1.4.0** only).
Jun 29, 2026
Oracle-related security advisories were issued for multiple enterprise products, including **Oracle Database Server**, **Oracle Fusion Middleware**, **Oracle REST Data Services**, **Oracle Java SE**, **Oracle Financial Services Applications**, and **Oracle E-Business Suite**. Germany's dCERT published separate advisories for each affected product line, indicating broad exposure across core Oracle infrastructure and business application environments. One of the disclosed flaws, **`CVE-2026-34275`**, affects the **Setup and Administration** component of **Oracle Advanced Inbound Telephony** in **Oracle E-Business Suite** versions **12.2.3 through 12.2.15**. Oracle rated the issue **critical** with a **CVSS v3.1 score of 9.8**, stating that an **unauthenticated attacker** with **network access over HTTP** could exploit it to achieve **full takeover** of the affected application. The vulnerability was disclosed as part of Oracle's broader Critical Patch Update, underscoring the need for organizations running Oracle platforms to prioritize patch review and remediation across exposed systems.
Jun 29, 2026