WaratekVRT Sign in

Oracle Critical Patch Update July 2016

Released July 2016 · Oracle's advisory ↗ · ← Critical Patch Update, April 2016 · Critical Patch Update, October 2016 →

222 CVEs in this release, one square each

Protected by Waratek, exploitedProtected by Waratek, exploitedProtected by WaratekProtected by WaratekMitigation candidateNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedOutside Waratek scope, exploitedOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeNot applicable, exploitedNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicable
Share this chart Oracle Critical Patch Update July 2016, one square per CVE: 113 Java CVEs, 4 protected by Waratek, 4 exploited, 109 other CVEs in this release.

Download the image

By status

4Protected by Waratek1Mitigation candidate108No exploit published30Outside Waratek scope79Not applicable 4Exploited, marked by the ring

No exploit published. For 108 of them, Oracle's security advisory is the source of public detail.

Protected by Waratek. Waratek RASP can block exploitation of these on systems that have not applied the patch yet.

Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Published from 2016-02-01✕
Overview 202 matches · 113 in Waratek scope · 4 protected · 2 exploited · 1 CISA KEV · 6 public PoC · 5 EPSS ≥ 0.5
202matches 113in Waratek scope55.9% 4protected2.0% 2exploited1.0% 1CISA KEV0.5% 6public PoC3.0% 5EPSS ≥ 0.52.5%
Protected by Waratek 4 2.0% Rule in development 0 0.0% Mitigation candidate 1 0.5% No exploit published 108 53.5% Outside Waratek scope 20 9.9% Not applicable 69 34.2% Withdrawn CVE 0 0.0%
Critical 21 10.4% High 66 32.7% Medium 100 49.5% Low 15 7.4% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 4 2.0% partly blocked 0 0.0% not blocked 198 98.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 2 1.0% Working exploit published 3 1.5% Proof of concept only 1 0.5% Forecast only 0 0.0% No public exploit 196 97.0%
split by peak 193 / quarter
Not applicable: 69Outside Waratek scope: 20No exploit published: 108Mitigation candidate: 1Protected by Waratek: 4 Low: 15Medium: 100High: 66Critical: 21 not blocked: 198blocked by ARMR today: 4 No public exploit: 196Proof of concept only: 1Working exploit published: 3Exploited: 2
Q1 163 Outside Waratek scope1 Not applicable2 Medium3 not blocked3 Proof of concept only1 No public exploit2 Q2 163 Protected by Waratek1 Not applicable2 High2 Medium1 blocked by ARMR today1 not blocked2 Exploited1 Working exploit published1 No public exploit1 Q3 16193 Protected by Waratek2 Mitigation candidate1 No exploit published108 Outside Waratek scope19 Not applicable63 Critical20 High62 Medium96 Low15 blocked by ARMR today2 not blocked191 Working exploit published2 No public exploit191 Q4 160 Q1 171 Not applicable1 High1 not blocked1 No public exploit1 Q2 170 Q3 171 Not applicable1 High1 not blocked1 No public exploit1 Q4 171 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1
Q1 16Q2 16Q3 16Q4 16Q1 17Q2 17Q3 17Q4 17
202 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 3 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2016-0800 Medium 2016-03-01 Not applicable Proof of concept only The SSLv2 protocol, as used in OpenSSL before 1.0.1s and 1.0.2 before 1.0.2g and other products, requires a server to send a ServerVerify message before establishing that a client possesses certain plaintext RSA data, which makes it easier for remote attackers to decrypt TLS ciphertext data by leveraging a Bleichenbacher RSA padding oracle, aka a "DROWN" attack.
CVE-2015-3197 Medium 2016-02-15 Outside Waratek scope No public exploit ssl/s2_srvr.c in OpenSSL 1.0.1 before 1.0.1r and 1.0.2 before 1.0.2f does not prevent use of disabled ciphers, which makes it easier for man-in-the-middle attackers to defeat cryptographic protection mechanisms by performing computations on SSLv2 traffic, related to the get_client_master_key and get_client_hello functions.
‹ prev page 3 of 3 next ›