# Oracle Security Alert Advisory - April 2024 (CPU02)

Mitigations for Oracle WebLogic Server and Oracle Database Server. Includes references to CVE-2024-9100 with additional product components.

Affected Products and Versions | Patch Availability Document
--- | ---
Oracle WebLogic Server, versions 14.1.1.0.0 | Fusion Middleware
Oracle Database Server, versions 19c, 21c | Database

CVE ID | Product | Component | Protocol | Remote Exploit without Auth.? | Base Score | Attack Vector | Attack Complex | Privs Req'd | User Interact | Scope | Confidentiality | Integrity | Availability | Supported Versions Affected | Notes
--- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | --- | ---
CVE-2024-9100 | Oracle WebLogic Server | Console | HTTP | Yes | 8.1 | Network | Low | Low | Required | Changed | High | High | High | Oracle WebLogic Server: 14.1.1.0.0 | Patch 99999999 available
CVE-2024-9101 | Oracle Database Server | SQL*Plus | Multiple | No | 5.4 | Local | Low | Low | None | Unchanged | Medium | Low | Low | Oracle Database Server: 19c, 21c | See Note B

Note B: Customers should review Support Doc 3010101.1 for mitigation guidance.

More details at Support KB.