Oracle To Address 320 Vulnerabilities in January Patch Update

Oracle will release its January 2025 Critical Patch Update on January 21, addressing 320 security vulnerabilities across over 90 products and 27 categories. Several flaws are high or critical (up to CVSS 9.9 affecting Oracle Supply Chain components), and Oracle urges customers to apply patches promptly; the report also notes CISA added an older WebLogic vulnerability (CVE-2020-2883) to its Known Exploited Vulnerabilities catalog, indicating some unpatched exposures remain in the wild.