Please update to the latest version after considering any possible impacts to applications that you may use. Some applications that use affected products may not run properly after updating the software to the latest version. SolutionOracle has released updates for each product.For Java SE and Weblogic, the following versions have been released: Please check if any of the affected products is included in the PCs or servers that you use.Īccording to Oracle, Java SE, Java SE JDK/JRE 6 and 7, which had already ended Public Updates, are also affected by these vulnerabilities.As for Java SE JDK/JRE 9, Public Updates ended in March 2018. In addition, there are cases where Java JRE is pre-installed on the PC or Weblogic is used in software products for servers. However, since there are many other versions and products affected by these vulnerabilities, please refer to the information provided by Oracle for more details.

Oracle WebLogic Server versions prior to 12.2.17 PSU Oracle WebLogic Server versions prior to 12.1.17 PSU Oracle WebLogic Server versions prior to 10.3.17 PSU Oracle WebLogic Portal versions prior to 10.3.6.0.0 SPU Java SE JDK/JRE 8 Update 162 and earlier Affected ProductsProducts affected by these vulnerabilities include: Users of the affected products are recommended to update to the latest version appropriately. Oracle Critical Patch Update Advisory - April 2018Ī remote attacker may cause the application to crash or execute arbitrary code by leveraging these vulnerabilities. OverviewOn Ap(local time), Oracle released critical patch updates for multiple Oracle products.

Java se development kit 8u172 vs 8u171