WaratekVRT Sign in

Oracle Critical Patch Update July 2014

Released July 2014 · Oracle's advisory ↗ · ← Critical Patch Update, April 2014 · Critical Patch Update, October 2014 →

103 CVEs in this release, one square each

Protected by Waratek, exploitedProtected by WaratekMitigation candidateNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedOutside Waratek scope, exploitedOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicable
Share this chart Oracle Critical Patch Update July 2014, one square per CVE: 50 Java CVEs, 2 protected by Waratek, 2 exploited, 53 other CVEs in this release.

Download the image

By status

2Protected by Waratek1Mitigation candidate47No exploit published27Outside Waratek scope26Not applicable 2Exploited, marked by the ring

No exploit published. For 45 of them, Oracle's security advisory is the source of public detail.

Protected by Waratek. Waratek RASP can block exploitation of these on systems that have not applied the patch yet.

Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Protection: None✕
Overview 101 matches · 48 in Waratek scope · 0 protected · 1 exploited · 0 CISA KEV · 3 public PoC · 1 EPSS ≥ 0.5
101matches 48in Waratek scope47.5% 0protected0.0% 1exploited1.0% 0CISA KEV0.0% 3public PoC3.0% 1EPSS ≥ 0.51.0%
Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 1 1.0% No exploit published 47 46.5% Outside Waratek scope 27 26.7% Not applicable 26 25.7% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 14 13.9% Medium 69 68.3% Low 18 17.8% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 101 100.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 1.0% Working exploit published 2 2.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 98 97.0%
split by peak 91 / month
Not applicable: 26Outside Waratek scope: 27No exploit published: 47Mitigation candidate: 1 Low: 18Medium: 69High: 14 not blocked: 101 No public exploit: 98Working exploit published: 2Exploited: 1
Feb 131 Not applicable1 Medium1 not blocked1 No public exploit1 Mar 130 Apr 130 May 130 Jun 131 Outside Waratek scope1 Medium1 not blocked1 No public exploit1 Jul 132 Outside Waratek scope2 High2 not blocked2 No public exploit2 Aug 130 Sep 130 Oct 130 Nov 131 Not applicable1 High1 not blocked1 No public exploit1 Dec 130 Jan 140 Feb 142 Outside Waratek scope2 Medium2 not blocked2 No public exploit2 Mar 141 Not applicable1 Medium1 not blocked1 No public exploit1 Apr 140 May 141 Not applicable1 High1 not blocked1 No public exploit1 Jun 141 Outside Waratek scope1 High1 not blocked1 Exploited1 Jul 1491 Mitigation candidate1 No exploit published47 Outside Waratek scope21 Not applicable22 High9 Medium64 Low18 not blocked91 Working exploit published2 No public exploit89
Mar 13May 13Jul 13Sep 13Nov 13Jan 14Mar 14May 14Jul 14
101 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2013-1620 Medium 2013-02-08 Not applicable No public exploit The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
‹ prev page 2 of 2 next ›