WaratekVRT Sign in

Oracle Critical Patch Update July 2014

Released July 2014 · Oracle's advisory ↗ · ← Critical Patch Update, April 2014 · Critical Patch Update, October 2014 →

103 CVEs in this release, one square each

Protected by Waratek, exploitedProtected by WaratekMitigation candidateNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedOutside Waratek scope, exploitedOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicable
Share this chart Oracle Critical Patch Update July 2014, one square per CVE: 50 Java CVEs, 2 protected by Waratek, 2 exploited, 53 other CVEs in this release.

Download the image

By status

2Protected by Waratek1Mitigation candidate47No exploit published27Outside Waratek scope26Not applicable 2Exploited, marked by the ring

No exploit published. For 45 of them, Oracle's security advisory is the source of public detail.

Protected by Waratek. Waratek RASP can block exploitation of these on systems that have not applied the patch yet.

Reset
More filters
Columns
Including CVEs outside Waratek scope✕
Overview 103 matches · 50 in Waratek scope · 2 protected · 2 exploited · 0 CISA KEV · 4 public PoC · 2 EPSS ≥ 0.5
103matches 50in Waratek scope48.5% 2protected1.9% 2exploited1.9% 0CISA KEV0.0% 4public PoC3.9% 2EPSS ≥ 0.51.9%
Protected by Waratek 2 1.9% Rule in development 0 0.0% Mitigation candidate 1 1.0% No exploit published 47 45.6% Outside Waratek scope 27 26.2% Not applicable 26 25.2% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 15 14.6% Medium 70 68.0% Low 18 17.5% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 2 1.9% partly blocked 0 0.0% not blocked 101 98.1% not established 0 0.0% unrecorded 0 0.0%
Exploited 2 1.9% Working exploit published 2 1.9% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 99 96.1%
split by peak 92 / month
Not applicable: 26Outside Waratek scope: 27No exploit published: 47Mitigation candidate: 1Protected by Waratek: 2 Low: 18Medium: 70High: 15 not blocked: 101blocked by ARMR today: 2 No public exploit: 99Working exploit published: 2Exploited: 2
Feb 131 Not applicable1 Medium1 not blocked1 No public exploit1 Mar 130 Apr 130 May 130 Jun 131 Outside Waratek scope1 Medium1 not blocked1 No public exploit1 Jul 132 Outside Waratek scope2 High2 not blocked2 No public exploit2 Aug 130 Sep 130 Oct 130 Nov 131 Not applicable1 High1 not blocked1 No public exploit1 Dec 130 Jan 140 Feb 142 Outside Waratek scope2 Medium2 not blocked2 No public exploit2 Mar 141 Not applicable1 Medium1 not blocked1 No public exploit1 Apr 141 Protected by Waratek1 High1 blocked by ARMR today1 Exploited1 May 141 Not applicable1 High1 not blocked1 No public exploit1 Jun 141 Outside Waratek scope1 High1 not blocked1 Exploited1 Jul 1492 Protected by Waratek1 Mitigation candidate1 No exploit published47 Outside Waratek scope21 Not applicable22 High9 Medium65 Low18 blocked by ARMR today1 not blocked91 Working exploit published2 No public exploit90
Mar 13May 13Jul 13Sep 13Nov 13Jan 14Mar 14May 14Jul 14
103 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2013-3751 High 2013-07-17 Outside Waratek scope No public exploit Unspecified vulnerability in the XML Parser component in Oracle Database Server 11.2.0.2, 11.2.0.3, and 12.1.0.1 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors.
CVE-2012-3544 Medium 2013-06-01 Outside Waratek scope No public exploit Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows remote attackers to cause a denial of service by streaming data.
CVE-2013-1620 Medium 2013-02-08 Not applicable No public exploit The TLS implementation in Mozilla Network Security Services (NSS) does not properly consider timing side-channel attacks on a noncompliant MAC check operation during the processing of malformed CBC padding, which allows remote attackers to conduct distinguishing attacks and plaintext-recovery attacks via statistical analysis of timing data for crafted packets, a related issue to CVE-2013-0169.
‹ prev page 2 of 2 next ›