Oracle has released an advance information on its upcoming quarterly patch that is planned to be released on 16 Jan 07.

This Critical Patch Update contains 52 new security fixes. At least 24 of them may be remotely exploitable without authentication. The highest CVSS base score of vulnerabilities across all products is 7.0.

The affected products include Oracle Database, Oracle Application Server, Oracle E-Business Suite and Applications, Oracle Enterprise Manager and Oracle PeopleSoft Enterprise.

http://www.oracle.com/technology/deploy/security/critical-patch-updates/cpujan2007.html