WaratekVRT Sign in

Oracle Critical Patch Update July 2023

Released July 2023 · Oracle's advisory ↗ · ← Critical Patch Update, April 2023 · Critical Patch Update, October 2023 →

269 CVEs in this release, one square each

Protected by Waratek, exploitedProtected by Waratek, exploitedProtected by Waratek, exploitedProtected by Waratek, exploitedProtected by Waratek, exploitedProtected by Waratek, exploitedProtected by Waratek, exploitedProtected by Waratek, exploitedProtected by Waratek, exploitedProtected by Waratek, exploitedProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekProtected by WaratekMitigation candidateMitigation candidateMitigation candidateMitigation candidateMitigation candidateNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedNo exploit publishedOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeOutside Waratek scopeNot applicable, exploitedNot applicable, exploitedNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicableNot applicable
Share this chart Oracle Critical Patch Update July 2023, one square per CVE: 155 Java CVEs, 45 protected by Waratek, 12 exploited, 114 other CVEs in this release.

Download the image

By status

45Protected by Waratek5Mitigation candidate105No exploit published31Outside Waratek scope83Not applicable 12Exploited, marked by the ring

No exploit published. For 37 of them, Oracle's security advisory is the source of public detail.

Protected by Waratek. Waratek RASP can block exploitation of these on systems that have not applied the patch yet.

Reset
More filters
Columns
Including CVEs outside Waratek scope✕
Overview 104 matches · 61 in Waratek scope · 13 protected · 4 exploited · 0 CISA KEV · 9 public PoC · 12 EPSS ≥ 0.5
104matches 61in Waratek scope58.7% 13protected12.5% 4exploited3.8% 0CISA KEV0.0% 9public PoC8.7% 12EPSS ≥ 0.511.5%
Protected by Waratek 13 12.5% Rule in development 0 0.0% Mitigation candidate 2 1.9% No exploit published 46 44.2% Outside Waratek scope 4 3.8% Not applicable 39 37.5% Withdrawn CVE 0 0.0%
Critical 0 0.0% High 104 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%
blocked by ARMR today 13 12.5% partly blocked 0 0.0% not blocked 91 87.5% not established 0 0.0% unrecorded 0 0.0%
Exploited 4 3.8% Working exploit published 2 1.9% Proof of concept only 19 18.3% Forecast only 4 3.8% No public exploit 75 72.1%
split by peak 27 / quarter
Not applicable: 39Outside Waratek scope: 4No exploit published: 46Mitigation candidate: 2Protected by Waratek: 13 High: 104 not blocked: 91blocked by ARMR today: 13 No public exploit: 75Forecast only: 4Proof of concept only: 19Working exploit published: 2Exploited: 4
Q2 191 Outside Waratek scope1 High1 not blocked1 Working exploit published1 Q3 192 Protected by Waratek1 No exploit published1 High2 blocked by ARMR today1 not blocked1 No public exploit2 Q4 190 Q1 200 Q2 200 Q3 200 Q4 201 No exploit published1 High1 not blocked1 No public exploit1 Q1 214 No exploit published4 High4 not blocked4 No public exploit4 Q2 211 Protected by Waratek1 High1 blocked by ARMR today1 No public exploit1 Q3 215 No exploit published5 High5 not blocked5 No public exploit5 Q4 211 Protected by Waratek1 High1 blocked by ARMR today1 Exploited1 Q1 228 Protected by Waratek2 No exploit published3 Outside Waratek scope2 Not applicable1 High8 blocked by ARMR today2 not blocked6 Proof of concept only3 Forecast only2 No public exploit3 Q2 224 Protected by Waratek1 No exploit published1 Not applicable2 High4 blocked by ARMR today1 not blocked3 No public exploit4 Q3 2213 Protected by Waratek2 Mitigation candidate1 No exploit published7 Not applicable3 High13 blocked by ARMR today2 not blocked11 Exploited1 Proof of concept only4 No public exploit8 Q4 2227 Protected by Waratek2 No exploit published12 Outside Waratek scope1 Not applicable12 High27 blocked by ARMR today2 not blocked25 Proof of concept only8 No public exploit19 Q1 2324 Protected by Waratek2 No exploit published8 Not applicable14 High24 blocked by ARMR today2 not blocked22 Exploited2 Proof of concept only3 Forecast only1 No public exploit18 Q2 237 Protected by Waratek1 No exploit published1 Not applicable5 High7 blocked by ARMR today1 not blocked6 Proof of concept only1 Forecast only1 No public exploit5 Q3 236 Mitigation candidate1 No exploit published3 Not applicable2 High6 not blocked6 Working exploit published1 No public exploit5
Q3 19Q1 20Q3 20Q1 21Q3 21Q1 22Q3 22Q1 23Q3 23
104 matches Sign in to download these CVEs as CSV or JSON, or to follow them in a feed. ‹ prev page 2 of 2 next ›
CVE Severity Published▾ Status Exploitation Description
CVE-2020-7760 High 2020-10-30 No exploit published No public exploit This affects the package codemirror before 5.58.2; the package org.apache.marmotta.webjars:codemirror before 5.58.2. The vulnerable regular expression is located in https://github.com/codemirror/CodeMirror/blob/cdb228ac736369c685865b122b736cd0d397836c/mode/javascript/javascript.jsL129. The ReDOS vulnerability of the regex is mainly due to the sub-pattern (s|/*.*?*/)*
CVE-2019-12402 High 2019-08-30 No exploit published No public exploit The file name encoding algorithm used internally in Apache Commons Compress 1.15 to 1.18 can get into an infinite loop when faced with specially crafted inputs. This can lead to a denial of service attack if an attacker can choose the file names inside of an archive created by Compress.
CVE-2019-10086 High 2019-08-20 Protected by Waratek No public exploit In Apache Commons Beanutils 1.9.2, a special BeanIntrospector class was added which allows suppressing the ability for an attacker to access the classloader via the class property available on all Java objects. We, however were not using this by default characteristic of the PropertyUtilsBean.
CVE-2019-0227 High 2019-05-01 Outside Waratek scope Working exploit published A Server Side Request Forgery (SSRF) vulnerability affected the Apache Axis 1.4 distribution that was last released in 2006. Security and bug commits commits continue in the projects Axis 1.x Subversion repository, legacy users are encouraged to build from source. The successor to Axis 1.x is Axis2, the latest version is 1.7.9 and is not vulnerable to this issue.
‹ prev page 2 of 2 next ›