The Oracle Critical Patch Update dwarfs Microsoft's planned one security fix for a flaw that affects Windows 2000, Windows XP, Windows Server 2003, Windows Vista and Windows Server 2008.
Oracle's patch includes 10 security fixes for Oracle Database, nine for Oracle Secure Backup and six for the PeopleSoft and JD Edwards suite.
The database giant has warned customers to apply the fixes as soon as possible because of the severity of the threat.
Oracle said that the most vulnerable products are the Windows version of Oracle Secure Backup, and WebLogic Server Plugin for Apache, Sun and IIS Web servers.
The complete list of products addressed by the patch is available in a Critical Patch Update Pre-Release Announcement.