WaratekVRT Sign in

Oracle Critical Patch Update January 2018

Released January 2018 · Oracle's advisory ↗ · ← Critical Patch Update, October 2017 · Critical Patch Update, April 2018 →

197 CVEs in this release, one square each

Protected by Waratek, exploitedProtected by Waratek, exploitedProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekMitigation candidateNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeNot applicable, exploitedNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicable
Share this chart Oracle Critical Patch Update January 2018, one square per CVE: 111 Java CVEs, 16 protected by Waratek, 3 exploited, 86 other CVEs in this release.

Download the image

By status

16Protected by Waratek1Mitigation candidate94No exploit published25Outside Waratek scope61Not applicable 3Exploited, marked by the ring

No exploit published. For 94 of them, Oracle's security advisory is the source of public detail.

Protected by Waratek. Waratek RASP can block exploitation of these on systems that have not applied the patch yet.

Reset
More filters
Columns
Including CVEs outside Waratek scope✕
Overview 102 matches · 62 in Waratek scope · 8 protected · 0 exploited · 0 CISA KEV · 3 public PoC · 4 EPSS ≥ 0.5
102matches 62in Waratek scope60.8% 8protected7.8% 0exploited0.0% 0CISA KEV0.0% 3public PoC2.9% 4EPSS ≥ 0.53.9%
Protected by Waratek 8 7.8% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 54 52.9% Outside Waratek scope 14 13.7% Not applicable 26 25.5% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 0 0.0% Medium 102 100.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 8 7.8% partly blocked 0 0.0% not blocked 94 92.2% not established 0 0.0% unrecorded 0 0.0%
Exploited 0 0.0% Working exploit published 3 2.9% Proof of concept only 0 0.0% Forecast only 2 2.0% No public exploit 97 95.1%
split by peak 93 / quarter
Not applicable: 26Outside Waratek scope: 14No exploit published: 54Protected by Waratek: 8 Medium: 102 not blocked: 94blocked by ARMR today: 8 No public exploit: 97Forecast only: 2Working exploit published: 3
Q1 131 Outside Waratek scope1 Medium1 not blocked1 Forecast only1 Q2 130 Q3 130 Q4 130 Q1 140 Q2 140 Q3 140 Q4 140 Q1 150 Q2 150 Q3 150 Q4 151 Outside Waratek scope1 Medium1 not blocked1 No public exploit1 Q1 161 Not applicable1 Medium1 not blocked1 No public exploit1 Q2 161 Not applicable1 Medium1 not blocked1 Working exploit published1 Q3 160 Q4 160 Q1 170 Q2 172 Not applicable2 Medium2 not blocked2 No public exploit2 Q3 170 Q4 173 Not applicable3 Medium3 not blocked3 Forecast only1 No public exploit2 Q1 1893 Protected by Waratek8 No exploit published54 Outside Waratek scope12 Not applicable19 Medium93 blocked by ARMR today8 not blocked85 Working exploit published2 No public exploit91
Q1 13Q3 13Q1 14Q3 14Q1 15Q3 15Q1 16Q3 16Q1 17Q3 17Q1 18
102 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2015-7940 Medium 2015-11-09 Outside Waratek scope No public exploit The Bouncy Castle Java library before 1.51 does not validate a point is withing the elliptic curve, which makes it easier for remote attackers to obtain private keys via a series of crafted elliptic curve Diffie Hellman (ECDH) key exchanges, aka an "invalid curve attack."
CVE-2013-2566 Medium 2013-03-15 Outside Waratek scope Forecast only The RC4 algorithm, as used in the TLS protocol and SSL protocol, has many single-byte biases, which makes it easier for remote attackers to conduct plaintext-recovery attacks via statistical analysis of ciphertext in a large number of sessions that use the same plaintext.
‹ prev page 2 of 2 next ›