Oracle Critical Patch Update April 2010
Released April 2010 · Oracle's advisory ↗ · ← Java SE Critical Patch Update, March 2010 · Critical Patch Update, July 2010 →
47 CVEs in this release, one square each
By status
No exploit published. For 23 of them, Oracle's security advisory is the source of public detail.
Overview 8 matches · 2 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
8matches
2in Waratek scope25.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
0public PoC0.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
2
25.0%
Outside Waratek scope
2
25.0%
Not applicable
4
50.0%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
8
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
8
100.0%
split by
peak 8 / month
Apr 10
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2010-0895 | Low | 2010-04-13 | Not applicable | No public exploit | Unspecified vulnerability in the Solaris component in Oracle Sun Product Suite OpenSolaris snv_119 allows local users to affect integrity and availability via unknown vectors related to IP Filter. |
| CVE-2010-0890 | Low | 2010-04-13 | Not applicable | No public exploit | Unspecified vulnerability in the Solaris component in Oracle Sun Product Suite 10 and OpenSolaris snv_01 through snv_98 allows local users to affect availability via unknown vectors related to the Kernel. |
| CVE-2010-0884 | Low | 2010-04-13 | Not applicable | No public exploit | Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-0883. |
| CVE-2010-0883 | Low | 2010-04-13 | Not applicable | No public exploit | Unspecified vulnerability in the Sun Cluster component in Oracle Sun Product Suite 3.1 and 3.2 allows local users to affect confidentiality via unknown vectors related to Data Service for Oracle E-Business Suite, a different vulnerability than CVE-2010-0884. |
| CVE-2010-0870 | Low | 2010-04-13 | Outside Waratek scope | No public exploit | Unspecified vulnerability in the Change Data Capture component in Oracle Database 9.2.0.8 and 9.2.0.8DV allows remote authenticated users to affect confidentiality and integrity, related to SYS.DBMS_CDC_PUBLISH. |
| CVE-2010-0858 | Low | 2010-04-13 | No exploit published | No public exploit | Unspecified vulnerability in the E-Business Intelligence component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authenticated users to affect integrity via unknown vectors. |
| CVE-2010-0857 | Low | 2010-04-13 | No exploit published | No public exploit | Unspecified vulnerability in the Oracle Workflow Cartridge component in Oracle E-Business Suite 11.5.10.2 allows remote authenticated users to affect integrity via unknown vectors. |
| CVE-2010-0854 | Low | 2010-04-13 | Outside Waratek scope | No public exploit | Unspecified vulnerability in the Audit component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authenticated users to affect integrity, related to "SELECT, INSERT or DELETE on tables subject to auditing." |