LUCAMEOracle has disclosed four significant vulnerabilities affecting its software, including flaws in its E-Business Suite and PeopleSoft platforms. One of the PeopleSoft issues originated from a criminal group called ShinyHunters and turns out to involve three separate vulnerabilities rather than one.
What this means for your business
If your business runs Oracle software, including HR, finance or ERP systems built on E-Business Suite or PeopleSoft, you'll want to check with your IT team or supplier that patches are applied promptly. Oracle issues fixes on a quarterly schedule, but attackers are already probing some of these weaknesses, so waiting until it's convenient isn't wise. Contact your Oracle support contact or managed service provider and ask them to confirm your patch status now.