WaratekVRT Sign in

Oracle Critical Patch Update April 2017

Released April 2017 · Oracle's advisory ↗ · ← Critical Patch Update, January 2017 · Critical Patch Update, July 2017 →

227 CVEs in this release, one square each

Protected by Waratek, exploitedProtected by Waratek, exploitedProtected by Waratek, exploitedProtected by Waratek, exploitedProtected by Waratek, exploitedProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekMitigation candidateNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeNot applicable, exploitedNot applicable, exploitedNot applicable, exploitedNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicable
Share this chart Oracle Critical Patch Update April 2017, one square per CVE: 113 Java CVEs, 17 protected by Waratek, 8 exploited, 114 other CVEs in this release.

Download the image

By status

17Protected by Waratek1Mitigation candidate95No exploit published13Outside Waratek scope101Not applicable 8Exploited, marked by the ring

No exploit published. For 93 of them, Oracle's security advisory is the source of public detail.

Protected by Waratek. Waratek RASP can block exploitation of these on systems that have not applied the patch yet.

Reset
More filters (1)
Columns
Including CVEs outside Waratek scope✕Published from 2016-08-01✕
Overview 201 matches · 105 in Waratek scope · 12 protected · 5 exploited · 2 CISA KEV · 16 public PoC · 7 EPSS ≥ 0.5
201matches 105in Waratek scope52.2% 12protected6.0% 5exploited2.5% 2CISA KEV1.0% 16public PoC8.0% 7EPSS ≥ 0.53.5%
Protected by Waratek 12 6.0% Rule in development 0 0.0% Mitigation candidate 1 0.5% No exploit published 92 45.8% Outside Waratek scope 9 4.5% Not applicable 87 43.3% Withdrawn CVE 0 0.0%
Critical 12 6.0% High 87 43.3% Medium 84 41.8% Low 18 9.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 12 6.0% partly blocked 0 0.0% not blocked 189 94.0% not established 0 0.0% unrecorded 0 0.0%
Exploited 5 2.5% Working exploit published 11 5.5% Proof of concept only 0 0.0% Forecast only 2 1.0% No public exploit 183 91.0%
split by peak 190 / month
Not applicable: 87Outside Waratek scope: 9No exploit published: 92Mitigation candidate: 1Protected by Waratek: 12 Low: 18Medium: 84High: 87Critical: 12 not blocked: 189blocked by ARMR today: 12 No public exploit: 183Forecast only: 2Working exploit published: 11Exploited: 5
Sep 162 Not applicable2 Critical1 High1 not blocked2 Forecast only1 No public exploit1 Oct 161 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1 Nov 160 Dec 161 Not applicable1 Critical1 not blocked1 No public exploit1 Jan 170 Feb 171 Not applicable1 High1 not blocked1 No public exploit1 Mar 171 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1 Apr 17190 Protected by Waratek9 Mitigation candidate1 No exploit published92 Outside Waratek scope7 Not applicable81 Critical7 High83 Medium82 Low18 blocked by ARMR today9 not blocked181 Exploited3 Working exploit published11 No public exploit176 May 172 Not applicable2 High1 Medium1 not blocked2 Forecast only1 No public exploit1 Jun 170 Jul 171 Outside Waratek scope1 High1 not blocked1 No public exploit1 Aug 171 Outside Waratek scope1 Medium1 not blocked1 No public exploit1 Sep 170 Oct 170 Nov 171 Protected by Waratek1 Critical1 blocked by ARMR today1 Exploited1
Sep 16Nov 16Jan 17Mar 17May 17Jul 17Sep 17Nov 17
201 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 3 of 3 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2016-6303 Critical 2016-09-16 Not applicable No public exploit Integer overflow in the MDC2_Update function in crypto/mdc2/mdc2dgst.c in OpenSSL before 1.1.0 allows remote attackers to cause a denial of service (out-of-bounds write and application crash) or possibly have unspecified other impact via unknown vectors.
‹ prev page 3 of 3 next ›