Oracle has yet to confirm the vulnerability or comment on its patching plans. The next critical patch update for Java is scheduled for Feb. 19.

The next security updates for Java are scheduled for April 16, but it’s possible that Oracle will be forced to release an emergency patch again in order to fix this actively exploited vulnerability.

The vulnerability allows SQL injection if PreferQueryMode=SIMPLE is used. However, the entry in the CVE database says “Note this is not the default. In the default mode there is no vulnerability.” ...

Azul, the only company 100% focused on Java, today announced an enhancement to Azul Intelligence Cloud, a breakthrough capability in Azul Vulnerability Detec ...