"Oracle delivered 41 security fixes to its customers in its first critical patch update (CPU) of the year.

Among those fixes are patches for serious flaws affecting Oracle WebLogic Server and Windows versions of Oracle Secure Backup. According to Oracle, a vulnerability in the WebLogic Server plugins for Apache, Sun and IIS Web servers received a common vulnerability scoring system (CVSS) rating of 10 and can be exploited remotely without authentication.

There are also three other vulnerabilities affecting WebLogic Server and an additional vulnerability in WebLogic Portal. The highest rating among them is 6.8.

Four of the nine vulnerabilities affecting Oracle Secure Backup received a CVSS score of 10. All nine of these flaws however can be exploited remotely without by hackers without authentication."

Read more: http://www.eweek.com/c/a/Security/Oracle-Releases-Critical-Patch-Update-With-41-Fixes/