CVE-2017-3304 — Oracle Mysql Cluster vulnerability

3 documents3 sources

Severity

5.4MEDIUMNVD

EPSS

0.4%

top 41.93%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Oracle Mysql Cluster Oracle Corporation Mysql Cluster

Timeline

PublishedApr 24

Latest updateMay 13

Description

Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: DD). Supported versions that are affected are 7.2.27 and earlier, 7.3.16 and earlier, 7.4.14 and earlier and 7.5.5 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Cluster accessible data and unau…

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:LExploitability: 2.8 | Impact: 2.5

Affected Packages2 packages

▶NVDoracle/mysql_cluster7.2.27+3

▶CVEListV5oracle_corporation/mysql_cluster4 versions+3

Patches

Patch: www.oracle.com ↗Patch: www.oracle.com ↗

🔴Vulnerability Details

GHSA

GHSA-v9mj-x7p7-7mr9: Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: DD)↗2022-05-13

▶

CVEList

CVE-2017-3304: Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: DD)↗2017-04-24

▶