□ 개요
 o 오라클社 CPU에서 자사 제품의 보안 취약점 349개에 대한 패치 발표 [1]
  ※ CPU(Critical Patch Update) : 오라클 중요 보안 업데이트
 o 영향받는 버전의 사용자는 악성코드 감염 등에 취약할 수 있으므로, 아래 해결 방안에 따라 최신 버전으로 업데이트 권고

□ 영향받는 제품 및 버전

	

		

			
영향받는 제품
			
패치 관련 문서
		
	
	

		

			

			
Oracle Autonomous Health Framework
		
		

			

			
Data
		
		

			

			
Enterprise Manager
		
		

			

			
Enterprise Manager
		
		

			

			
Enterprise Manager
		
		

			

			
JD Edwards
		
		

			

			
JD Edwards
		
		

			

			
MySQL
		
		

			

			
MySQL
		
		

			

			
MySQL
		
		

			

			
MySQL
		
		

			

			
MySQL
		
		

			

			
MySQL
		
		

			

			
Oracle Supply Chain Products
		
		

			

			
Oracle Supply Chain Products
		
		

			

			
Oracle Supply Chain Products
		
		

			

			
Data
		
		

			

			
Enterprise Manager
		
		

			

			
Oracle Supply Chain Products
		
		

			

			
Contact Support
		
		

			

			
Contact Support
		
		

			

			
Contact Support
		
		

			

			
Contact Support
		
		

			

			
Contact Support
		
		

			

			
Contact Support
		
		

			

			
Contact Support
		
		

			

			
Contact Support
		
		

			

			
Oracle Banking Platform
		
		

			

			
Oracle Banking Platform
		
		

			

			
Contact Support
		
		

			

			
Contact Support
		
		

			

			
Contact Support
		
		

			

			
Contact Support
		
		

			

			
Berkeley DB
		
		

			

			
Oracle Analytics
		
		

			

			
Oracle Blockchain Platform
		
		

			

			
Oracle Analytics
		
		

			

			
Fusion Middleware
		
		

			

			
Oracle Commerce
		
		

			

			
Oracle Commerce
		
		

			

			
Oracle Commerce
		
		

			

			
Oracle Communications ASAP
		
		

			

			
Oracle Communications Billing and Revenue Management
		
		

			

			
Oracle Communications BRM - Elastic Charging Engine
		
		

			

			
Oracle Communications Cloud Native Core Binding Support Function
		
		

			

			
Oracle Communications Cloud Native Core Console
		
		

			

			
Oracle Communications Cloud Native Core Network Exposure Function
		
		

			

			
Oracle Communications Cloud Native Core Network Function Cloud Native Environment
		
		

			

			
Oracle Communications Cloud Native Core Network Repository Function
		
		

			

			
Oracle Communications Cloud Native Core Network Slice Selection Function
		
		

			

			
Oracle Communications Cloud Native Core Policy
		
		

			

			
Oracle Communications Cloud Native Core Security Edge Protection Proxy
		
		

			

			
Oracle Communications Cloud Native Core Service Communication Proxy
		
		

			

			
Oracle Communications Cloud Native Core Unified Data Repository
		
		

			

			
Oracle Communications Core Session Manager
		
		

			

			
Oracle Communications Design Studio
		
		

			

			
Oracle Communications Instant Messaging Server
		
		

			

			
Oracle Communications IP Service Activator
		
		

			

			
Oracle Communications Offline Mediation Controller
		
		

			

			
Oracle Communications Operations Monitor
		
		

			

			
Oracle Communications Session Border Controller
		
		

			

			
Oracle Communications Unified Inventory Management
		
		

			

			
Oracle Communications Unified Session Manager
		
		

			

			
Oracle Construction and Engineering Suite
		
		

			

			
Fusion Middleware
		
		

			

			
Data
		
		

			

			
Oracle E-Business Suite
		
		

			

			
Oracle Enterprise Communications Broker
		
		

			

			
Oracle Enterprise Operations Monitor
		
		

			

			
Oracle Enterprise Session Border Controller
		
		

			

			
Data
		
		

			

			
Oracle Financial Services Analytical Applications Infrastructure
		
		

			

			
Oracle Financial Services Behavior Detection Platform
		
		

			

			
Oracle Financial Services Crime and Compliance Management Studio
		
		

			

			
Oracle Financial Services Enterprise Case Management
		
		

			

			
Oracle Financial Services Revenue Management and Billing
		
		

			

			
Oracle Financial Services Trade-Based Anti Money Laundering Enterprise Edition
		
		

			

			
Contact Support
		
		

			

			
Contact Support
		
		

			

			
Contact Support
		
		

			

			
Fusion Middleware
		
		

			

			
Global Lifecycle Management
		
		

			

			
Data
		
		

			

			
Java SE
		
		

			

			
Data
		
		

			

			
Health Sciences
		
		

			

			
Health Sciences
		
		

			

			
HealthCare Applications
		
		

			

			
HealthCare Applications
		
		

			

			
Oracle Hospitality Cruise Shipboard Property Management System
		
		

			

			
Oracle Hospitality Inventory Management
		
		

			

			
Oracle Hospitality Materials Control
		
		

			

			
Oracle Hospitality OPERA 5 Property Services
		
		

			

			
Fusion Middleware
		
		

			

			
Fusion Middleware
		
		

			

			
Fusion Middleware
		
		

			

			
Java SE
		
		

			

			
Fusion Middleware
		
		

			

			
Fusion Middleware
		
		

			

			
NoSQL Data
		
		

			

			
Oracle Policy Automation 
		
		

			

			
Oracle Policy Automation 
		
		

			

			
Oracle Supply Chain Products
		
		

			

			
Data
		
		

			

			
Retail Applications
		
		

			

			
Retail Applications
		
		

			

			
Retail Applications
		
		

			

			
Retail Applications
		
		

			

			
Retail Applications
		
		

			

			
Retail Applications
		
		

			

			
Retail Applications
		
		

			

			
Retail Applications
		
		

			

			
Retail Applications
		
		

			

			
Retail Applications
		
		

			

			
Retail Applications
		
		

			

			
Retail Applications
		
		

			

			
Oracle SD-WAN Edge
		
		

			

			
Fusion Middleware
		
		

			

			
Fusion Middleware
		
		

			

			
Systems
		
		

			

			
Data
		
		

			

			
Data
		
		

			

			
Data
		
		

			

			
Data
		
		

			

			
Oracle Supply Chain Products
		
		

			

			
Oracle Utilities Applications
		
		

			

			
Virtualization
		
		

			

			
Fusion Middleware
		
		

			

			
Fusion Middleware
		
		

			

			
Fusion Middleware
		
		

			

			
Fusion Middleware
		
		

			

			
Fusion Middleware
		
		

			

			
Systems
		
		

			

			
PeopleSoft
		
		

			

			
Oracle Construction and Engineering Suite
		
		

			

			
Oracle Construction and Engineering Suite
		
		

			

			
Oracle Construction and Engineering Suite
		
		

			

			
Siebel
		
	

□ 해결 방안
 o "Oracle Critical Patch Update Advisory - July 2022“ 문서 및 패치 사항을 검토하고 벤더 사 및 유지보수 업체와 협의/검토 후 패치 적용 [1]
 o JAVA SE 사용자는 설치된 제품의 최신 업데이트를 다운로드[2] 받아 설치하거나, Java 업데이트 자동 알림 설정을 권고 [3]

□ 기타 문의사항
 o 한국인터넷진흥원 사이버민원센터: 국번없이 118

[참고사이트]
[1] https://www.oracle.com/security-s/cpujul2022.html
[2] http://www.oracle.com/technetwork/java/javase/downloads/index.html
[3] https://www.java.com/ko/download/help/java_update.html
 

□ 작성 : 침해사고분석단 취약점분석팀