WaratekVRT Sign in

Oracle Critical Patch Update April 2019

Released April 2019 · Oracle's advisory ↗ · ← Critical Patch Update, January 2019 · Critical Patch Update, July 2019 →

207 CVEs in this release, one square each

Protected by Waratek, exploitedProtected by Waratek, exploitedProtected by Waratek, exploitedProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekMitigation candidate, exploitedMitigation candidateMitigation candidateNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedOutside Waratek scope, exploitedOutside Waratek scope, exploitedOutside Waratek scope, exploitedOutside Waratek scope, exploitedOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicable
Share this chart Oracle Critical Patch Update April 2019, one square per CVE: 106 Java CVEs, 20 protected by Waratek, 8 exploited, 101 other CVEs in this release.

Download the image

By status

20Protected by Waratek3Mitigation candidate83No exploit published58Outside Waratek scope43Not applicable 8Exploited, marked by the ring

No exploit published. For 80 of them, Oracle's security advisory is the source of public detail.

Protected by Waratek. Waratek RASP can block exploitation of these on systems that have not applied the patch yet.

Reset
More filters (1)
Columns
Published from 2016-10-01✕
Overview 102 matches · 16 protected · 3 exploited · 1 CISA KEV · 7 public PoC · 3 EPSS ≥ 0.5
102matches 16protected15.7% 3exploited2.9% 1CISA KEV1.0% 7public PoC6.9% 3EPSS ≥ 0.52.9%
Protected by Waratek 17 16.7% Rule in development 0 0.0% Mitigation candidate 3 2.9% No exploit published 82 80.4%
Critical 15 14.7% High 50 49.0% Medium 35 34.3% Low 2 2.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 16 15.7% partly blocked 1 1.0% not blocked 85 83.3% not established 0 0.0% unrecorded 0 0.0%
Exploited 3 2.9% Working exploit published 3 2.9% Proof of concept only 1 1.0% Forecast only 0 0.0% No public exploit 95 93.1%
split by peak 87 / quarter
No exploit published: 82Mitigation candidate: 3Protected by Waratek: 17 Low: 2Medium: 35High: 50Critical: 15 not blocked: 85partly blocked: 1blocked by ARMR today: 16 No public exploit: 95Proof of concept only: 1Working exploit published: 3Exploited: 3
Q4 161 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1 Q1 170 Q2 171 Protected by Waratek1 Critical1 blocked by ARMR today1 Working exploit published1 Q3 171 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1 Q4 170 Q1 182 Protected by Waratek2 Critical2 blocked by ARMR today2 No public exploit2 Q2 183 Protected by Waratek1 No exploit published2 Critical1 High2 blocked by ARMR today1 not blocked2 No public exploit3 Q3 183 Protected by Waratek2 No exploit published1 High3 blocked by ARMR today2 not blocked1 Proof of concept only1 No public exploit2 Q4 180 Q1 194 Protected by Waratek4 Critical3 High1 blocked by ARMR today4 No public exploit4 Q2 1987 Protected by Waratek5 Mitigation candidate3 No exploit published79 Critical6 High44 Medium35 Low2 blocked by ARMR today4 partly blocked1 not blocked82 Exploited3 Working exploit published2 No public exploit82
Q4 16Q1 17Q2 17Q3 17Q4 17Q1 18Q2 18Q3 18Q4 18Q1 19Q2 19
102 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2017-5645 Critical 2017-04-17 Protected by Waratek Working exploit published In Apache Log4j 2.x before 2.8.2, when using the TCP socket server or UDP socket server to receive serialized log events from another application, a specially crafted binary payload can be sent that, when deserialized, can execute arbitrary code.
CVE-2016-1000031 Critical 2016-10-25 Protected by Waratek No public exploit Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution
‹ prev page 2 of 2 next ›