{"uuid": "f94e99f4-91a5-4169-9a41-29d22e486b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-21992", "type": "seen", "source": "https://gist.github.com/israelgoracle/8cfacdc462c3f40f6a02c30a4a322aaf", "content": "# \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n# parches.info \u2014 Referencia de parches Oracle CPU/BP para RDAnalyzer\n#\n# Formato:\n#   %PRODUCTO%                    \u2014 bloque de producto (WLS, OSB, SOA, JDK\u2026)\n#   -version-                     \u2014 versi\u00f3n del producto (coincidencia por prefijo)\n#   patch_id; descripci\u00f3n; CPU Release; comments\n#\n# CPU Release: mes y a\u00f1o del Oracle Critical Patch Update (ej: \"January 2026\")\n# El RDAnalyzer compara la fecha del \u00faltimo CPU aqu\u00ed registrado con la fecha\n# del \u00faltimo parche instalado en el sistema. Si el CPU aqu\u00ed es igual o anterior,\n# solicitar\u00e1 revisar la nota KA1182 en MOS para actualizar este fichero.\n#\n# Nota MOS de referencia: KA1182 \u2014 Critical Patch Update (CPU) Patch Advisor\n#   for Oracle Fusion Middleware\n#   https://support.oracle.com/rs?type=doc&id=2806740.2\n#\n# \u2500\u2500 REGLA DE APLICABILIDAD POR TIPO DE DOMINIO \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n#\n#   %WLS%  \u2192 dominios WLS standalone (sin SOA ni OSB)\n#            El WLS Stack Patch Bundle cubre WLS + FMW Infrastructure.\n#\n#   %OSB%  \u2192 dominios Oracle Service Bus\n#            El OSB/FMW Control Bundle ya incluye los parches de WLS/FMW;\n#            NO se auditan los parches %WLS% por separado en dominios OSB.\n#\n#   %SOA%  \u2192 dominios Oracle SOA Suite / BPM\n#            El SOA Stack Patch Bundle ya incluye los parches de WLS/FMW;\n#            NO se auditan los parches %WLS% por separado en dominios SOA.\n#\n#   %JDK%  \u2192 aplica siempre, independientemente del tipo de dominio.\n#\n# El tipo de dominio se detecta autom\u00e1ticamente por los m\u00f3dulos RDA cargados\n# (campo rda_modules en topology.json) o por el nombre del dominio WLS.\n# \u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\n\n# \u2500\u2500 WLS standalone (no SOA, no OSB) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# Auditar solo cuando el dominio es WLS puro (sin SOA ni OSB desplegados).\n# En dominios OSB o SOA el Stack Patch Bundle correspondiente cubre WLS.\n\n%WLS%\n-12.2.1.4-\n34065178; Oracle Virtual Directory Required FMW Compatibility Patch for JDK 8u331 (or later); April 2022; Aplicar cuando FMW Infrastructure est\u00e1 instalado. No requerido para WLS standalone.\n38820898; WLS STACK PATCH BUNDLE 12.2.1.4.260106; January 2026; Incluye parches de seguridad y correcciones acumulativas para WLS 12.2.1.4.\n\n-14.1.2-\n39168280; Oracle WebLogic Server\nWLS STACK PATCH BUNDLE 14.1.2.0.260405; April 2026; To see what is included, see the README and Note 2764636.1, Introducing the Stack Patch Bundle (SPB) with SPBAT Utility for Oracle WebLogic Server\n\n# \u2500\u2500 Oracle Service Bus (OSB) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# El FMW Control Bundle / OWSM Bundle incluye parches de WLS, FMW Infrastructure\n# y Service Bus. No se requiere aplicar el WLS SPB por separado.\n\n%OSB%\n-12.2.1.4-\n38633461; FMW CONTROL BUNDLE PATCH 12.2.1.4.260120; January 2026; Parche acumulativo para OSB/FMW 12.2.1.4. Incluye correcciones de WLS, FMW Infra y Service Bus.\n38807758; OWSM BUNDLE PATCH 12.2.1.4.251230; January 2026; Oracle Web Services Manager Bundle Patch para OSB 12.2.1.4.\n39023318; Oracle Web Services Manager Fix for Bug 39023318 (Download for 12.2.1.4.251230); March 2026; Aplicar para CVE-2026-21992 / Security Alert KB878741.\n\n-14.1.2-\n38830994; Oracle SOA Suite SOA Stack Patch Bundle 14.1.2.0.260109; January 2026; El SOA/OSB SPB incluye parches de WLS, FMW Infrastructure y SOA/OSB.\n39023318; Oracle Web Services Manager Fix for Bug 39023318; March 2026; Actualizaci\u00f3n Mar 2026: aplicar para CVE-2026-21992.\n\n# \u2500\u2500 Oracle SOA Suite / BPM \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n# El SOA Stack Patch Bundle incluye parches de WLS, FMW Infrastructure y SOA.\n# No se requiere aplicar el WLS SPB por separado.\n\n%SOA%\n-12.2.1.4-\n39167223; Oracle WebLogic Server\nWLS STACK PATCH BUNDLE 12.2.1.4.260404; April 2026; To see what is included, see the README and Note 2764636.1, Introducing the Stack Patch Bundle (SPB) with SPBAT Utility for Oracle WebLogic Server.\n\n-14.1.2-\n38830994; Oracle SOA Suite SOA Stack Patch Bundle 14.1.2.0.260109; January 2026; Incluye parches de WLS, FMW Infrastructure y SOA Suite 14.1.2.\n39023318; Oracle Web Services Manager Fix for Bug 39023318; March 2026; Actualizaci\u00f3n Mar 2026: aplicar para CVE-2026-21992.\n\n# \u2500\u2500 JDK (aplica a todos los dominios) \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\n\n%JDK%\n-1.8-\n18143322; Java SE 8u481 for Linux/Windows/Solaris; January 2026; Oracle CPU January 2026 para Oracle Java SE 8.\n\n-11-\n# A\u00f1adir parches CPU vigentes para JDK 11 tras consultar nota KA1182\n\n-17-\n33181589; Java SE 17.0.18 or later; April 2026; Oracle Critical Patch Update (CPU) January 2026 para Oracle Java SE 17.\n\n-21-\n35702194; Java SE 21.0.10 or later; April 2026; Oracle Critical Patch Update (CPU) January 2026 para Oracle Java SE 21.\n", "creation_timestamp": "2026-05-28T22:38:37.000000Z"}