What are you running?
Name a product and the release you run. You get its CVEs, with whether Waratek has a rule for each one, whether a fix is known and whether exploitation has been reported.
How versions match
A CVE matches when its records name your version or a range that includes it. Oracle Java SE is the exception: Oracle's advisories name only the latest update of each Java release, so 8u281 also matches a CVE Oracle listed for 8u491. If a CVE's versions can't be read, it is shown anyway.
Browse Oracle products by family
The 93 product families that Oracle's patch advisories name for CVEs in this data. Counts are distinct CVEs; a CVE listed under two components of a family is counted once for the family. Select a family's components to filter by component instead.
Oracle Construction and Engineering 223 153 components
- Document Management (Spring Framework) 32
- Web Access 22
- Admin (Spring Framework) 19
- Admin (jackson-databind) 6
- Admin (Apache Log4j) 5
- Platform (Apache Log4j) 5
- Platform (Apache Neethi) 5
- Platform (Apache ZooKeeper) 5
- Web Access (DOMPurify) 5
- Admin (Apache Commons Compress) 4
- Core (Apache HTTP Server) 4
- Core (Apache Tomcat) 4
- Document Management (FreeType) 4
- Platform (jackson-databind) 4
- Admin (Apache Ant) 3
- Document Management (Apache Solr) 3
- Document Viewing using Outside In technology (FreeType) 3
- Platform (Apache Commons Compress) 3
- Platform (MPXJ) 3
- Admin (Apache Commons IO) 2
- Admin (Apache Commons VFS) 2
- Admin (Apache POI) 2
- Admin (Google Protobuf-Java) 2
- Admin (JSON-java) 2
- Admin (Lodash) 2
- Admin (json-smart) 2
- Core 2
- Core (Apache POI) 2
- Core (jackson-databind) 2
- Document Management (Apache Commons FileUpload) 2
- Document Management (Apache Tika) 2
- Document Management (jackson-databind) 2
- Event Streams and Communications (Apache Kafka) 2
- Generic (Apache HTTP Server) 2
- Generic (Apache Tomcat) 2
- Integration (Lodash) 2
- Integration (Spring Framework) 2
- Integrators (Apache CXF) 2
- Investor Module 2
- Logging (Apache Log4j) 2
- Logging (Log4j) 2
- P6 Web Services (Apache CXF) 2
- Platform (Apache Tika) 2
- Platform (jsoup) 2
- Project Manager 2
- User Interface (jQueryUI) 2
- API component of P6 Pro (JDBC) 1
- Admin (Apache Commons Beanutils) 1
- Admin (Apache Commons Lang) 1
- Admin (Apache Commons Net) 1
- Admin (Apache Commons Text) 1
- Admin (Apache Groovy) 1
- Admin (Apache Xerces-J) 1
- Admin (Connect2id Nimbus JOSE+JWT) 1
- Admin (Google Guava) 1
- Admin (JCraft JSch) 1
- Admin (JDBC) 1
- Admin (JSZip) 1
- Admin (Log4j) 1
- Admin (Moment.js) 1
- Admin (Netty) 1
- Admin (Nimbus JOSE+JWT) 1
- Admin (Swagger UI) 1
- Admin (jQuery) 1
- Browser (Apache Cordova InAppBrowser) 1
- Core (Apache Ant) 1
- Core (Apache Axis) 1
- Core (Apache Commons BeanUtils) 1
- Core (Apache Kafka) 1
- Core (Apache Log4j) 1
- Core (Apache PDFbox) 1
- Core (Apache Tika) 1
- Core (HTTP Client) 1
- Core (JDBC) 1
- Core (jQuery) 1
- Core UI (dojo) 1
- Core UI (jQuery) 1
- Core, Config (Apache Ant) 1
- Dashboard module (Apache Batik) 1
- Dashboards and Reports (Apache Batik) 1
- Data Service (Guava) 1
- Document Management (Apache Commons IO) 1
- Document Management (Apache ZooKeeper) 1
- Document Manager (Apache ZooKeeper) 1
- ETL (JDBC) 1
- File Management (Apache Commons Compress) 1
- Generic (Apache Axis) 1
- Generic (Apache POI) 1
- HTTP Server (Apache Tomcat) 1
- Infrastructure (Quartz) 1
- Infrastructure (jackson-databind) 1
- Installation 1
- Integration (Apache James MIME4J) 1
- Integration (Apache Tika) 1
- Integration (Apache ZooKeeper) 1
- Integration (Nimbus JOSE+JWT) 1
- Logging 1
- Mobile (Mobile Application Framework) 1
- Mobile App 1
- Office Open document processor (Apache POI) 1
- Outside In Technology Installer in P6 (FreeType) 1
- P6WS (DOMPurify) 1
- Platform (Apache Ant) 1
- Platform (Apache Commons BeanUtils) 1
- Platform (Apache Commons IO) 1
- Platform (Apache Commons Lang) 1
- Platform (Apache Derby) 1
- Platform (Apache Groovy) 1
- Platform (Apache Solr) 1
- Platform (Enterprise Security API for Java (Legacy)) 1
- Platform (Google Guava) 1
- Platform (dojo) 1
- Platform (iText) 1
- Platform (jackson-core) 1
- Platform (json-smart) 1
- Platform, Data Persistence (OWASP Java HTML Sanitizer) 1
- Platform, Mobile App 1
- Platform, UI (Lodash) 1
- Platform, User Interface (Apache Xerces-J) 1
- Platform,Data Access,Data Persistence (JDBC) 1
- Platform,Data Parsing (jsoup) 1
- Project Control 1
- Project Delivery (jackson-databind) 1
- Provider (Apache Axis) 1
- Reports (iTextPDF) 1
- System Configuration (Apache Ant) 1
- Team Member (DOMPurify) 1
- UI (jQuery) 1
- User Interface (Enterprise Security API) 1
- User Interface (JSZip) 1
- User Interface (Moment.js) 1
- User Interface (UnderscoreJS) 1
- User Interface (jsoup) 1
- Web (Apache Commons Compress) 1
- Web (Google Guava) 1
- Web (JSON-java) 1
- Web API 1
- Web Access (Apache Commons BeanUtils) 1
- Web Access (Apache Kafka) 1
- Web Access (Apache Log4j) 1
- Web Access (Apache POI) 1
- Web Access (JDBC) 1
- Web Access (Mojarra) 1
- Web Access (dom4j) 1
- Web Access (jackson-core) 1
- Web Access (jackson-databind) 1
- Web Access (kafka client) 1
- Web Server 1
- Web Services (json-smart) 1
- Web access (Spring Framework) 1
- WebAccess 1
- WebServer (Apache Tomcat) 1
- WebUI 1