Oracle Critical Patch Update October 2012
Released October 2012 · Oracle's advisory ↗ · ← Critical Patch Update, July 2012 · Java SE Critical Patch Update, October 2012 →
107 CVEs in this release, one square each
By status
2Protected by Waratek5Mitigation candidate61No exploit published5Outside Waratek scope34Not applicable
3Exploited, marked by the ring
No exploit published. For 61 of them, Oracle's security advisory is the source of public detail.
Protected by Waratek. Waratek RASP can block exploitation of these on systems that have not applied the patch yet.
Overview 103 matches · 68 in Waratek scope · 2 protected · 3 exploited · 2 CISA KEV · 7 public PoC · 2 EPSS ≥ 0.5
103matches
68in Waratek scope66.0%
2protected1.9%
3exploited2.9%
2CISA KEV1.9%
7public PoC6.8%
2EPSS ≥ 0.51.9%
Protected by Waratek
2
1.9%
Rule in development
0
0.0%
Mitigation candidate
5
4.9%
No exploit published
61
59.2%
Outside Waratek scope
3
2.9%
Not applicable
32
31.1%
Withdrawn CVE
0
0.0%
blocked by ARMR today
2
1.9%
partly blocked
0
0.0%
not blocked
100
97.1%
not established
1
1.0%
unrecorded
0
0.0%
Exploited
3
2.9%
Working exploit published
5
4.9%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
95
92.2%
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2012-0090 | Low | 2012-10-16 | No exploit published | No public exploit | Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect integrity via unknown vectors related to Web, a different vulnerability than CVE-2012-0092. |
| CVE-2012-0086 | Low | 2012-10-16 | No exploit published | No public exploit | Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote authenticated users to affect confidentiality via unknown vectors related to Web, a different vulnerability than CVE-2012-0095 and CVE-2012-0108. |
| CVE-2012-0071 | Medium | 2012-10-16 | No exploit published | No public exploit | Unspecified vulnerability in the Oracle Imaging and Process Management component in Oracle Fusion Middleware 10.1.3.6.0 allows remote attackers to affect integrity via unknown vectors related to Web, a different vulnerability than CVE-2012-0093. |