It’s been a busy week at Oracle. The company has recently released a massive flurry of patches that fix a staggering 136 security issues for a wide range of the products it sells. This release comes in tandem with the decision to switch from CVSS 2.0 to CVSS 3.0 (the Common Vulnerability Scoring System).
The change is significant because the switch to the more up to date CVSS changes the way security issues are rated, on balance, increasing the severity level of known issues.