WaratekVRT Sign in

Oracle Critical Patch Update April 2016

Released April 2016 · Oracle's advisory ↗ · ← Critical Patch Update, January 2016 · Critical Patch Update, July 2016 →

121 CVEs in this release, one square each

Protected by Waratek, exploitedProtected by Waratek, exploitedProtected by Waratek, exploitedProtected by WaratekProtected by WaratekNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeNot applicable, exploitedNot applicable, exploitedNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicable
Share this chart Oracle Critical Patch Update April 2016, one square per CVE: 50 Java CVEs, 5 protected by Waratek, 5 exploited, 71 other CVEs in this release.

Download the image

By status

5Protected by Waratek45No exploit published20Outside Waratek scope51Not applicable 5Exploited, marked by the ring

No exploit published. For 43 of them, Oracle's security advisory is the source of public detail.

Protected by Waratek. Waratek RASP can block exploitation of these on systems that have not applied the patch yet.

Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Published from 2016-03-01✕
Overview 103 matches · 48 in Waratek scope · 4 protected · 3 exploited · 1 CISA KEV · 2 public PoC · 3 EPSS ≥ 0.5
103matches 48in Waratek scope46.6% 4protected3.9% 3exploited2.9% 1CISA KEV1.0% 2public PoC1.9% 3EPSS ≥ 0.52.9%
Protected by Waratek 4 3.9% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 44 42.7% Outside Waratek scope 11 10.7% Not applicable 44 42.7% Withdrawn CVE 0 0.0%
Critical 12 11.7% High 17 16.5% Medium 66 64.1% Low 8 7.8% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 4 3.9% partly blocked 0 0.0% not blocked 99 96.1% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 2.9% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 100 97.1%
split by peak 101 / quarter
Not applicable: 44Outside Waratek scope: 11No exploit published: 44Protected by Waratek: 4 Low: 8Medium: 66High: 17Critical: 12 not blocked: 99blocked by ARMR today: 4 No public exploit: 100Exploited: 3
Q1 161 Not applicable1 Critical1 not blocked1 No public exploit1 Q2 16101 Protected by Waratek3 No exploit published44 Outside Waratek scope11 Not applicable43 Critical10 High17 Medium66 Low8 blocked by ARMR today3 not blocked98 Exploited2 No public exploit99 Q3 160 Q4 160 Q1 170 Q2 170 Q3 170 Q4 171 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1
Q1 16Q2 16Q3 16Q4 16Q1 17Q2 17Q3 17Q4 17
103 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2016-0408 Medium 2016-04-21 No exploit published No public exploit Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 through 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to the Activity Guide sub-component.
CVE-2016-0407 Medium 2016-04-21 No exploit published No public exploit Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration.
CVE-2016-0705 Critical 2016-03-03 Not applicable No public exploit Double free vulnerability in the dsa_priv_decode function in crypto/dsa/dsa_ameth.c in OpenSSL 1.0.1 before 1.0.1s and 1.0.2 before 1.0.2g allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via a malformed DSA private key.
‹ prev page 2 of 2 next ›