Every three months Oracle release security patches for flaws in its software products. Next Tuesday Oracle will release first Critical Patch Update for 2008 containing 7 security fixes, some of which will affect several products. This fixes are low by Oracle’s standards. Last October the company patched 51 vulnerabilities and none of the database vulnerabilities can be exploited over a network without the attacker first obtaining a username and password for the database. Software included in those fixes are E-Business Suite, Oracle Application Server, PeopleSoft and JD Edwards products and Oracle Enterprise Manager and the Oracle Collaboration Suite.