WaratekVRT Sign in

Oracle Critical Patch Update July 2012

Released July 2012 · Oracle's advisory ↗ · ← Java SE Critical Patch Update, June 2012 · Critical Patch Update, October 2012 →

87 CVEs in this release, one square each

Mitigation candidateMitigation candidateMitigation candidateNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeNot applicable, exploitedNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicable
Share this chart Oracle Critical Patch Update July 2012, one square per CVE: 46 Java CVEs, 1 exploited, 41 other CVEs in this release.

Download the image

By status

3Mitigation candidate43No exploit published8Outside Waratek scope33Not applicable 1Exploited, marked by the ring

No exploit published. For 43 of them, Oracle's security advisory is the source of public detail.

Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Published from 2011-09-01✕
Overview 29 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 3 public PoC · 3 EPSS ≥ 0.5
29matches 0in Waratek scope0.0% 0protected0.0% 0exploited0.0% 0CISA KEV0.0% 3public PoC10.3% 3EPSS ≥ 0.510.3%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 29 100.0% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 3 10.3% Medium 23 79.3% Low 3 10.3% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 29 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 3 10.3% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 26 89.7%
split by peak 25 / month
Not applicable: 29 Low: 3Medium: 23High: 3 not blocked: 29 No public exploit: 26Working exploit published: 3
Oct 111 Not applicable1 Medium1 not blocked1 Working exploit published1 Nov 111 Not applicable1 Medium1 not blocked1 Working exploit published1 Dec 111 Not applicable1 Medium1 not blocked1 Working exploit published1 Jan 120 Feb 120 Mar 120 Apr 120 May 121 Not applicable1 High1 not blocked1 No public exploit1 Jun 120 Jul 1225 Not applicable25 High2 Medium20 Low3 not blocked25 No public exploit25
Oct 11Nov 11Dec 11Jan 12Feb 12Mar 12Apr 12May 12Jun 12Jul 12
29 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed.
CVE Severity Published▾ Status Exploitation Description
CVE-2012-3131 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle Sun Solaris 9, 10, and 11 allows remote attackers to affect confidentiality, related to Network/NFS.
CVE-2012-3130 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle Sun Solaris 11 allows remote attackers to affect integrity via unknown vectors related to pkg.depotd.
CVE-2012-3129 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect confidentiality, integrity, and availability, related to Gnome PDF viewer.
CVE-2012-3128 Low 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle SPARC T-Series Servers running System Firmware 8.2.0 and 8.1.4.e or earlier allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Integrated Lights Out Manager.
CVE-2012-3127 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect availability, related to SCTP.
CVE-2012-3126 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in the Solaris Cluster component in Oracle Sun Products Suite 3.3 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Apache Tomcat Agent.
CVE-2012-3125 High 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle Sun Solaris 8, 9, and 10 allows remote attackers to affect availability, related to TCP/IP.
CVE-2012-3124 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect availability, related to Kernel/KSSL.
CVE-2012-3123 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect confidentiality, related to Apache HTTP Server.
CVE-2012-3122 Low 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle Sun Solaris 8 and 9 allows local users to affect confidentiality and integrity via unknown vectors related to sort.
CVE-2012-3121 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle Sun Solaris 9 and 10 allows remote attackers to affect availability via unknown vectors related to in.tnamed and NameServer.
CVE-2012-3120 High 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle Sun Solaris 8 allows remote attackers to affect availability, related to TCP/IP.
CVE-2012-3112 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle Sun Solaris 10 allows remote attackers to affect integrity via unknown vectors related to Solaris Management Console.
CVE-2012-1765 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle Sun Solaris 10 allows local users to affect integrity via unknown vectors related to Branded Zone.
CVE-2012-1757 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB.
CVE-2012-1756 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors.
CVE-2012-1752 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle Sun Solaris 11 allows local users to affect availability, related to Kernel/NFS.
CVE-2012-1750 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect confidentiality, integrity, and availability via unknown vectors related to mailx.
CVE-2012-1738 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in the Oracle iPlanet Web Server component in Oracle Sun Products Suite Java System Web Server 6.1 and Oracle iPlanet Web Server 7.0 allows remote attackers to affect availability via unknown vectors related to Web Server.
CVE-2012-1735 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle MySQL Server 5.5.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
CVE-2012-1734 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.23 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
CVE-2012-1689 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier, and 5.5.22 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
CVE-2012-1687 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle Solaris 10 and 11 allows local users to affect integrity and availability, related to Logical Domains (LDOM).
CVE-2012-0563 Low 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle Solaris 9, 10, and 11 allows local users to affect availability via unknown vectors related to Kerberos/klist.
CVE-2012-0540 Medium 2012-07-17 Not applicable No public exploit Unspecified vulnerability in Oracle MySQL Server 5.1.62 and earlier and 5.5.23 and earlier allows remote authenticated users to affect availability, related to GIS Extension.
CVE-2011-2699 High 2012-05-24 Not applicable No public exploit The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service (disrupted networking) by predicting these values and sending crafted packets.
CVE-2011-4885 Medium 2011-12-30 Not applicable Working exploit published PHP before 5.3.9 computes hash values for form parameters without restricting the ability to trigger hash collisions predictably, which allows remote attackers to cause a denial of service (CPU consumption) by sending many crafted parameters.
CVE-2011-4317 Medium 2011-11-30 Not applicable Working exploit published The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21, when the Revision 1179239 patch is in place, does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an @ (at sign) character and a : (colon) character in invalid positions. NOTE: this vulnerability exists because of an incomplete fix for CVE-2011-3368.
CVE-2011-3368 Medium 2011-10-05 Not applicable Working exploit published The mod_proxy module in the Apache HTTP Server 1.3.x through 1.3.42, 2.0.x through 2.0.64, and 2.2.x through 2.2.21 does not properly interact with use of (1) RewriteRule and (2) ProxyPassMatch pattern matches for configuration of a reverse proxy, which allows remote attackers to send requests to intranet servers via a malformed URI containing an initial @ (at sign) character.