WaratekVRT Sign in

Oracle Critical Patch Update October 2012

Released October 2012 · Oracle's advisory ↗ · ← Critical Patch Update, July 2012 · Java SE Critical Patch Update, October 2012 →

107 CVEs in this release, one square each

Protected by Waratek, exploitedProtected by Waratek, exploitedMitigation candidate, exploitedMitigation candidateMitigation candidateMitigation candidateMitigation candidateNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicable
Share this chart Oracle Critical Patch Update October 2012, one square per CVE: 68 Java CVEs, 2 protected by Waratek, 3 exploited, 39 other CVEs in this release.

Download the image

By status

2Protected by Waratek5Mitigation candidate61No exploit published5Outside Waratek scope34Not applicable 3Exploited, marked by the ring

No exploit published. For 61 of them, Oracle's security advisory is the source of public detail.

Protected by Waratek. Waratek RASP can block exploitation of these on systems that have not applied the patch yet.

Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Published from 2012-07-01✕
Overview 105 matches · 68 in Waratek scope · 2 protected · 3 exploited · 2 CISA KEV · 8 public PoC · 2 EPSS ≥ 0.5
105matches 68in Waratek scope64.8% 2protected1.9% 3exploited2.9% 2CISA KEV1.9% 8public PoC7.6% 2EPSS ≥ 0.51.9%
Protected by Waratek 2 1.9% Rule in development 0 0.0% Mitigation candidate 5 4.8% No exploit published 61 58.1% Outside Waratek scope 5 4.8% Not applicable 32 30.5% Withdrawn CVE 0 0.0%
Critical 1 1.0% High 7 6.7% Medium 60 57.1% Low 37 35.2% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 1.9% partly blocked 0 0.0% not blocked 102 97.1% not established 1 1.0% unrecorded 0 0.0%
Exploited 3 2.9% Working exploit published 6 5.7% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 96 91.4%
split by peak 103 / month
Not applicable: 32Outside Waratek scope: 5No exploit published: 61Mitigation candidate: 5Protected by Waratek: 2 Low: 37Medium: 60High: 7Critical: 1 not established: 1not blocked: 102blocked by ARMR today: 2 No public exploit: 96Working exploit published: 6Exploited: 3
Aug 121 Outside Waratek scope1 Medium1 not blocked1 No public exploit1 Sep 121 Outside Waratek scope1 Medium1 not blocked1 Working exploit published1 Oct 12103 Protected by Waratek2 Mitigation candidate5 No exploit published61 Outside Waratek scope3 Not applicable32 Critical1 High7 Medium58 Low37 blocked by ARMR today2 not blocked100 not established1 Exploited3 Working exploit published5 No public exploit95
Aug 12Sep 12Oct 12
105 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2012-0090 Low 2012-10-16 No exploit published No public exploit Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect integrity via unknown vectors related to Web, a different vulnerability than CVE-2012-0092.
CVE-2012-0086 Low 2012-10-16 No exploit published No public exploit Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web, a different vulnerability than CVE-2012-0095 and CVE-2012-0108.
CVE-2012-0071 Medium 2012-10-16 No exploit published No public exploit Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote attackers to affect integrity via unknown vectors related to Web, a different vulnerability than CVE-2012-0093.
CVE-2012-3137 Medium 2012-09-21 Outside Waratek scope Working exploit published The authentication protocol in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote attackers to obtain the session key and salt for arbitrary users, which leaks information about the cryptographic hash and makes it easier to conduct brute force password guessing attacks, aka "stealth password cracking vulnerability."
CVE-2012-3132 Medium 2012-08-10 Outside Waratek scope No public exploit SQL injection vulnerability in Oracle Database Server 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, and 11.2.0.3 allows remote authenticated users to execute arbitrary SQL commands via vectors involving CREATE INDEX with a CTXSYS.CONTEXT INDEXTYPE and DBMS_STATS.GATHER_TABLE_STATS.
‹ prev page 2 of 2 next ›