WaratekVRT Sign in

Oracle Critical Patch Update January 2017

Released January 2017 · Oracle's advisory ↗ · ← Critical Patch Update, October 2016 · Critical Patch Update, April 2017 →

163 CVEs in this release, one square each

Protected by Waratek, exploitedProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicable
Share this chart Oracle Critical Patch Update January 2017, one square per CVE: 101 Java CVEs, 12 protected by Waratek, 1 exploited, 62 other CVEs in this release.

Download the image

By status

12Protected by Waratek89No exploit published16Outside Waratek scope46Not applicable 1Exploited, marked by the ring

No exploit published. For 86 of them, Oracle's security advisory is the source of public detail.

Protected by Waratek. Waratek RASP can block exploitation of these on systems that have not applied the patch yet.

Reset
More filters (1)
Columns
Published to 2017-11-30✕
Overview 101 matches · 12 protected · 1 exploited · 0 CISA KEV · 3 public PoC · 2 EPSS ≥ 0.5
101matches 12protected11.9% 1exploited1.0% 0CISA KEV0.0% 3public PoC3.0% 2EPSS ≥ 0.52.0%
Protected by Waratek 12 11.9% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 89 88.1%
Critical 7 6.9% High 37 36.6% Medium 50 49.5% Low 7 6.9% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 12 11.9% partly blocked 0 0.0% not blocked 89 88.1% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 1.0% Working exploit published 2 2.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 98 97.0%
split by peak 95 / quarter
No exploit published: 89Protected by Waratek: 12 Low: 7Medium: 50High: 37Critical: 7 not blocked: 89blocked by ARMR today: 12 No public exploit: 98Working exploit published: 2Exploited: 1
Q1 151 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 Q2 150 Q3 150 Q4 150 Q1 160 Q2 161 No exploit published1 Medium1 not blocked1 No public exploit1 Q3 162 Protected by Waratek2 High1 Medium1 blocked by ARMR today2 No public exploit2 Q4 161 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1 Q1 1795 Protected by Waratek7 No exploit published88 Critical5 High36 Medium47 Low7 blocked by ARMR today7 not blocked88 Working exploit published2 No public exploit93 Q2 170 Q3 170 Q4 171 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1
Q1 15Q2 15Q3 15Q4 15Q1 16Q2 16Q3 16Q4 16Q1 17Q2 17Q3 17Q4 17
101 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2015-0250 Medium 2015-03-24 Protected by Waratek No public exploit XML external entity (XXE) vulnerability in the SVG to (1) PNG and (2) JPG conversion classes in Apache Batik 1.x before 1.8 allows remote attackers to read arbitrary files or cause a denial of service via a crafted SVG file.
‹ prev page 2 of 2 next ›