CVE-2024-21262

Severity
6.5MEDIUM
EPSS
0.2%
top 58.18%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedOct 15

Description

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). Supported versions that are affected are 9.0.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data and unauthorized ability to cause a partial denial of service (part

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:LExploitability: 3.9 | Impact: 2.5

Affected Packages2 packages

NVDoracle/mysql9.0.0

🔴Vulnerability Details

3
GHSA
GHSA-78hg-6jfm-9v5w: Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC)2024-10-15
CVEList
CVE-2024-21262: Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC)2024-10-15
OSV
CVE-2024-21262: Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC)2024-10-15

📋Vendor Advisories

2
Red Hat
mysql: From CVEorg collector2024-10-15
Oracle
Oracle Oracle MySQL Risk Matrix: Connector/ODBC — CVE-2024-212622024-10-15
CVE-2024-21262 (MEDIUM CVSS 6.5) | Vulnerability in the MySQL Connecto | cvebase.io