WaratekVRT Sign in

Oracle Critical Patch Update October 2021

Released October 2021 · Oracle's advisory ↗ · ← Critical Patch Update, July 2021 · Critical Patch Update, January 2022 →

231 CVEs in this release, one square each

Protected by Waratek, exploitedProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekMitigation candidateMitigation candidateMitigation candidateNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedOutside Waratek scope, exploitedOutside Waratek scope, exploitedOutside Waratek scope, exploitedOutside Waratek scope, exploitedOutside Waratek scope, exploitedOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeNot applicable, exploitedNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicable
Share this chart Oracle Critical Patch Update October 2021, one square per CVE: 101 Java CVEs, 26 protected by Waratek, 7 exploited, 130 other CVEs in this release.

Download the image

By status

26Protected by Waratek3Mitigation candidate72No exploit published42Outside Waratek scope88Not applicable 7Exploited, marked by the ring

No exploit published. For 52 of them, Oracle's security advisory is the source of public detail.

Protected by Waratek. Waratek RASP can block exploitation of these on systems that have not applied the patch yet.

Reset
More filters
Columns
Overview 101 matches · 26 protected · 1 exploited · 1 CISA KEV · 7 public PoC · 6 EPSS ≥ 0.5
101matches 26protected25.7% 1exploited1.0% 1CISA KEV1.0% 7public PoC6.9% 6EPSS ≥ 0.55.9%
Protected by Waratek 26 25.7% Rule in development 0 0.0% Mitigation candidate 3 3.0% No exploit published 72 71.3%
Critical 11 10.9% High 40 39.6% Medium 46 45.5% Low 4 4.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 26 25.7% partly blocked 0 0.0% not blocked 75 74.3% not established 0 0.0% unrecorded 0 0.0%
Exploited 1 1.0% Working exploit published 4 4.0% Proof of concept only 3 3.0% Forecast only 2 2.0% No public exploit 91 90.1%
split by peak 54 / quarter
No exploit published: 72Mitigation candidate: 3Protected by Waratek: 26 Low: 4Medium: 46High: 40Critical: 11 not blocked: 75blocked by ARMR today: 26 No public exploit: 91Forecast only: 2Proof of concept only: 3Working exploit published: 4Exploited: 1
Q4 161 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1 Q1 170 Q2 170 Q3 170 Q4 170 Q1 181 Protected by Waratek1 Critical1 blocked by ARMR today1 No public exploit1 Q2 181 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 Q3 180 Q4 180 Q1 190 Q2 190 Q3 192 Protected by Waratek2 High1 Medium1 blocked by ARMR today2 No public exploit2 Q4 191 Protected by Waratek1 Medium1 blocked by ARMR today1 No public exploit1 Q1 201 No exploit published1 High1 not blocked1 No public exploit1 Q2 202 Protected by Waratek2 Critical1 High1 blocked by ARMR today2 Working exploit published1 No public exploit1 Q3 205 Protected by Waratek2 No exploit published3 Critical2 High3 blocked by ARMR today2 not blocked3 No public exploit5 Q4 207 Protected by Waratek3 No exploit published4 Critical1 High3 Medium2 Low1 blocked by ARMR today3 not blocked4 Exploited1 No public exploit6 Q1 2110 Protected by Waratek3 No exploit published7 Critical3 High4 Medium3 blocked by ARMR today3 not blocked7 Working exploit published1 No public exploit9 Q2 2110 Protected by Waratek3 Mitigation candidate1 No exploit published6 High6 Medium4 blocked by ARMR today3 not blocked7 Working exploit published2 Forecast only1 No public exploit7 Q3 216 No exploit published6 High2 Medium4 not blocked6 Forecast only1 No public exploit5 Q4 2154 Protected by Waratek7 Mitigation candidate2 No exploit published45 Critical2 High19 Medium30 Low3 blocked by ARMR today7 not blocked47 Proof of concept only3 No public exploit51
Q4 16Q2 17Q4 17Q2 18Q4 18Q2 19Q4 19Q2 20Q4 20Q2 21Q4 21
101 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2016-1000031 Critical 2016-10-25 Protected by Waratek No public exploit Apache Commons FileUpload before 1.3.3 DiskFileItem File Manipulation Remote Code Execution
‹ prev page 2 of 2 next ›