CVE-2021-35625

EPSS 0.18%
Published 20.10.2021 11:17:14
Last modified 21.11.2024 06:12:40
Source secalert_us@oracle.com
Teams watchlist Login
Open Login

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.26 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N).

Affected products Warnungen 0 Metrics 3 CWE 0 References 5

Data is provided by the National Vulnerability Database (NVD)

Netapp ≫ Oncommand Insight Version-

Netapp ≫ Snapcenter Version-

Oracle ≫ Mysql Version >= 8.0.0 <= 8.0.26

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.18%	0.401

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	4	8	2.9	AV:N/AC:L/Au:S/C:P/I:N/A:N
secalert_us@oracle.com	2.7	1.2	1.4	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

https://www.oracle.com/security-alerts/cpuoct2021.html

Vendor Advisory

https://security.netapp.com/advisory/ntap-20211022-0003/

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-35625

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-35625

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-35625

EUVD