Oracle Critical Patch Update April 2016
Released April 2016 · Oracle's advisory ↗ · ← Critical Patch Update, January 2016 · Critical Patch Update, July 2016 →
121 CVEs in this release, one square each
By status
5Protected by Waratek45No exploit published20Outside Waratek scope51Not applicable
5Exploited, marked by the ring
No exploit published. For 43 of them, Oracle's security advisory is the source of public detail.
Protected by Waratek. Waratek RASP can block exploitation of these on systems that have not applied the patch yet.
Overview 102 matches · 48 in Waratek scope · 4 protected · 3 exploited · 1 CISA KEV · 2 public PoC · 3 EPSS ≥ 0.5
102matches
48in Waratek scope47.1%
4protected3.9%
3exploited2.9%
1CISA KEV1.0%
2public PoC2.0%
3EPSS ≥ 0.52.9%
Protected by Waratek
4
3.9%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
44
43.1%
Outside Waratek scope
11
10.8%
Not applicable
43
42.2%
Withdrawn CVE
0
0.0%
blocked by ARMR today
4
3.9%
partly blocked
0
0.0%
not blocked
98
96.1%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
3
2.9%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
99
97.1%
split by
peak 101 / quarter
Q2 16101
Protected by Waratek3
No exploit published44
Outside Waratek scope11
Not applicable43
Critical10
High17
Medium66
Low8
blocked by ARMR today3
not blocked98
Exploited2
No public exploit99
Q3 160
Q4 160
Q1 170
Q2 170
Q3 170
Q4 171
Protected by Waratek1
Critical1
blocked by ARMR today1
Exploited1
Q2 16Q3 16Q4 16Q1 17Q2 17Q3 17Q4 17
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2016-0408 | Medium | 2016-04-21 | No exploit published | No public exploit | Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools component in Oracle PeopleSoft Products 8.53 through 8.55 allows remote authenticated users to affect confidentiality and integrity via vectors related to the Activity Guide sub-component. |
| CVE-2016-0407 | Medium | 2016-04-21 | No exploit published | No public exploit | Unspecified vulnerability in the PeopleSoft Enterprise HCM component in Oracle PeopleSoft Products 9.1 and 9.2 allows remote authenticated users to affect confidentiality via vectors related to Fusion HR Talent Integration. |