mysql/mysql-connector-java vulnerabilities

Latest mysql/mysql-connector-java CVEs

Newest publication first

1. CVE-2023-22102 MySQL Connectors takeover vulnerability

   Published 2023-10-17

   High·CVSS 8.3 EPSS 0.99%

   Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.1.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Conn...

2. CVE-2022-21363 Improper Handling of Insufficient Permissions or Privileges in MySQL Connectors Java

   Published 2022-01-19

   Medium·CVSS 6.6 EPSS 1.5%

   Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Con...

3. CVE-2021-2471 Incorrect Authorization in MySQL Connector Java

   Published 2021-10-20

   Medium·CVSS 5.9 EPSS 7.5%

   Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Con...

4. CVE-2019-2692 Privilege escalation in mysql-connector-jav

   Published 2019-04-23

   Medium·CVSS 6.3 EPSS 0.47%

   Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Connectors execu...

5. CVE-2018-3258 Improper Privilege Management in MySQL Connectors Java

   Published 2018-10-17

   High·CVSS 8.8 EPSS 3.7%

   Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL C...

6. CVE-2017-3589 Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java

   Published 2017-04-24

   Low·CVSS 3.3 EPSS 0.47%

   Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors exec...

7. CVE-2017-3523 Improper Access Control in MySQL Connectors Java

   Published 2017-04-24

   High·CVSS 8.5 EPSS 2.9%

   Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.40 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MyS...

8. CVE-2017-3586 Exposure of Sensitive Information to an Unauthorized Actor in Oracle MySQL Connectors Java

   Published 2017-04-24

   Medium·CVSS 6.4 EPSS 1.7%

   Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MyS...

9. CVE-2015-2575 Improper Access Control in MySQL Connectors Java

   Published 2015-04-16

   Medium·CVSS 4.9 EPSS 3.6%

   Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.