Oracle Critical Patch Update — April 2024
Tuesday, 16 April 2024
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Critical 5
- Critical 9.9
- Critical 9.9
- Critical 9.8
- Critical 9.8
- Critical 9.1
Public exploit code 3
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
-
High 7.8
CVE-2024-21111 Public exploit Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily …EPSS 1.8%
-
High 7.5
CVE-2024-21006 Public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1…EPSS 7.9%
- Medium 6.7
All vulnerabilities 133
Critical5 ShowHide
- Critical 9.9
- Critical 9.9
- Critical 9.8
- Critical 9.8
- Critical 9.1
High26 ShowHide
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.8
- High 8.2
- High 8.2
- High 8.1
-
High 7.8
CVE-2024-21111 Public exploit Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Easily …EPSS 1.8%
- High 7.8
- High 7.8
- High 7.8
-
High 7.5
CVE-2024-21006 Public exploit Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core). Supported versions that are affected are 12.2.1.4.0 and 14.1…EPSS 7.9%
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.3
- High 7.2
- High 7.0
Medium86 ShowHide
- Medium 6.7
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
-
Medium 5.9
CVE-2024-21109 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). Supported versions that are affected are Prior to 7.0.16. Difficu…EPSS 1.1%
- Medium 5.8
- Medium 5.5
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.3
- Medium 5.3
- Medium 5.3
- Medium 5.3
- Medium 5.3
- Medium 5.3
- Medium 5.3
- Medium 5.3
-
Medium 4.9
CVE-2024-20993 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.35 and prior and 8.2.0 a…EPSS 1.1%
- Medium 4.9
-
Medium 4.9
CVE-2024-21009 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.3.0 a…EPSS 1.1%
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
-
Medium 4.9
CVE-2024-21102 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.36 and prior and 8.…EPSS 1.1%
- Medium 4.7
- Medium 4.4
- Medium 4.4
- Medium 4.4
- Medium 4.3
- Medium 4.3
- Medium 4.3
- Medium 4.2
- Medium 4.0
Low16 ShowHide
- Low 3.8
- Low 3.7
-
Low 3.7
CVE-2024-21011 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versio…EPSS 1.4%
- Low 3.7
-
Low 3.7
CVE-2024-21068 Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Hotspot). Supported versio…EPSS 1.3%
-
Low 3.7
CVE-2024-21085 Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Concurrency). Supported versions that are affected…EPSS 1.3%
- Low 3.7
- Low 3.7
- Low 3.3
- Low 3.1
- Low 3.1
- Low 2.5
- Low 2.5
- Low 2.4
- Low 2.2
- Low 2.0