Oracle Security Patch Update – 16 July 2025

By /
  • 157/2025
  • Critical

Oracle released its critical patch updates for July 2025, containing (309) new security patches for multiple affected products in Oracle code and third-party components.

The addressed vulnerabilities could allow the attacker to perform various attacks such as obtaining sensitive information, bypassing security restrictions, conducting denial of service attacks, performing data manipulation (update, insert, or delete
access), or executing arbitrary commands and gaining access to the affected product.

Sample of the addressed vulnerabilities:

1. Oracle Application Express Takeover Vulnerability (CVE-2025-50067):

  • CVSS: 9
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: Low
  • User Interaction: Required
  • Consequences: Gain Access

2. Oracle Java SE Bypass Security Vulnerability (CVE-2025-50059):

  • CVSS: 8.6
  • Attack Vector: Network
  • Attack Complexity: Low
  • Privileges Required: None
  • User Interaction: None
  • Consequences: Bypass Security

Sample of The Affected Products:

  • Oracle Database Server.
  • Oracle Application Express.
  • Oracle Communications.
  • Oracle Enterprise Manager.
  • Oracle MySQL.

The complete list of the affected products: Oracle Advisory – July 2025

Vulnerabilities

Oracle Map of CVE to Advisory/Alert

Mitigations

The enterprise should deploy this patch as soon as the testing phase is completed.

Oracle Advisory – July 2025

References