CVE-2015-0409 — Oracle Communications Policy Management vulnerability

6 documents6 sources

Severity

4.0MEDIUMNVD

EPSS

0.9%

top 24.94%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Communications Policy Management Oracle Mysql

Timeline

PublishedJan 21

Latest updateMay 17

Description

Unspecified vulnerability in Oracle MySQL Server 5.6.21 and earlier allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 8.0 | Impact: 2.9

Affected Packages2 packages

▶NVDoracle/mysql5.6.21

▶NVDoracle/communications_policy_management9.7.3+3

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-9fv6-pwxc-86pc: Unspecified vulnerability in Oracle MySQL Server 5↗2022-05-17

▶

OSV

CVE-2015-0409: Unspecified vulnerability in Oracle MySQL Server 5↗2015-01-21

▶

CVEList

CVE-2015-0409: Unspecified vulnerability in Oracle MySQL Server 5↗2015-01-21

▶

📋Vendor Advisories

Red Hat

mysql: unspecified vulnerability related to Server:Optimizer (CPU Jan 2015)↗2015-01-21

▶

💬Community

Bugzilla

CVE-2015-0409 mysql: unspecified vulnerability related to Server:Optimizer (CPU Jan 2015)↗2015-01-21

▶