Oracle has released the CPU for October and a list of the CVE-IDs with different products. But there is no link from the IDs to a patch download.
From MOS, and try to search the patch, but CVE ID is not an option.
Please share your knowledge as to how to locate a patch based on the CVE ID.
Thanks
Larry