Easier said than done...
….would be well-advised to read and follow Oracle's advisories
Reading is one thing, following is another.....
Oracle's patching advisories (at least from WebLogic/Fusion Middleware) seem to be designed to make it as difficult/opaque as possible to work out what actually needs to be done....
(I have been patching 10.3.6 today....)
Steve