WaratekVRT Sign in

Oracle Critical Patch Update July 2010

Released July 2010 · Oracle's advisory ↗ · ← Critical Patch Update, April 2010 · Critical Patch Update, October 2010 →

59 CVEs in this release, one square each

Mitigation candidateMitigation candidateNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeNot applicable, exploitedNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicable
Share this chart Oracle Critical Patch Update July 2010, one square per CVE: 25 Java CVEs, 1 exploited, 34 other CVEs in this release.

Download the image

By status

2Mitigation candidate23No exploit published7Outside Waratek scope27Not applicable 1Exploited, marked by the ring

No exploit published. For 23 of them, Oracle's security advisory is the source of public detail.

Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Protection: None✕
Overview 8 matches · 2 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 1 EPSS ≥ 0.5
8matches 2in Waratek scope25.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 1EPSS ≥ 0.512.5%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 2 25.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 6 75.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 1 12.5% Medium 4 50.0% Low 3 37.5% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 8 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 8 100.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 0 0.0%
split by peak 7 / quarter
Not applicable: 6Mitigation candidate: 2 Low: 3Medium: 4High: 1 not blocked: 8 Working exploit published: 8
Q3 081 Not applicable1 High1 not blocked1 Working exploit published1 Q4 080 Q1 090 Q2 090 Q3 090 Q4 090 Q1 100 Q2 100 Q3 107 Mitigation candidate2 Not applicable5 Medium4 Low3 not blocked7 Working exploit published7
Q3 08Q4 08Q1 09Q2 09Q3 09Q4 09Q1 10Q2 10Q3 10
8 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2010-2384 Low 2010-07-13 Not applicable Working exploit published Unspecified vulnerability in Oracle Solaris 9 and 10 allows local users to affect confidentiality and integrity via unknown vectors related to Solaris Management Console.
CVE-2010-2383 Low 2010-07-13 Not applicable Working exploit published Unspecified vulnerability in Oracle Solaris 8, 9, and 10, and OpenSolaris, allows local users to affect confidentiality and integrity, related to NFS.
CVE-2010-2382 Low 2010-07-13 Not applicable Working exploit published Unspecified vulnerability in Oracle Solaris 8, 9, and 10 allows local users to affect confidentiality and integrity via unknown vectors.
CVE-2010-2375 Medium 2010-07-13 Mitigation candidate Working exploit published Package/Privilege: Plugins for Apache, Sun and IIS web servers Unspecified vulnerability in the WebLogic Server component in Oracle Fusion Middleware 7.0 SP7, 8.1 SP6, 9.0, 9.1, 9.2 MP3, 10.0 MP2, 10.3.2, and 10.3.3 allows remote attackers to affect confidentiality and integrity, related to IIS.
CVE-2010-2370 Medium 2010-07-13 Mitigation candidate Working exploit published Unspecified vulnerability in the Oracle Business Process Management component in Oracle Fusion Middleware 5.7 MP3, 6.0 MP5, and 10.3 MP2 allows remote attackers to affect integrity, related to BPM.
CVE-2010-0916 Medium 2010-07-13 Not applicable Working exploit published Unspecified vulnerability in Oracle OpenSolaris 10 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to rdist.
CVE-2010-0904 Medium 2010-07-13 Not applicable Working exploit published Unspecified vulnerability in Oracle Secure Backup 10.3.0.1 allows remote attackers to affect integrity via unknown vectors.
CVE-2008-4247 High 2008-09-25 Not applicable Working exploit published ftpd in OpenBSD 4.3, FreeBSD 7.0, NetBSD 4.0, Solaris, and possibly other operating systems interprets long commands from an FTP client as multiple commands, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and execute arbitrary FTP commands via a long ftp:// URI that leverages an existing session from the FTP client implementation in a web browser.