Oracle Mysql Cluster vulnerabilities
48 known vulnerabilities affecting oracle/mysql_cluster.
Total CVEs
48
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH7MEDIUM32LOW8
Vulnerabilities
Page 3 of 3
CVE-2019-10219MEDIUMCVSS 6.1fixed in 7.4.34≥ 7.5.0, < 7.5.24+2 more2019-11-08
CVE-2019-10219 [MEDIUM] CWE-79 CVE-2019-10219: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properl
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
nvd
CVE-2018-2877MEDIUMCVSS 5.0≥ 7.2.0, ≤ 7.2.27≥ 7.3.1, ≤ 7.3.16+2 more2018-04-19
CVE-2018-2877 [MEDIUM] CVE-2018-2877: Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: ndbcluster/plug
Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: ndbcluster/plugin). Supported versions that are affected are 7.2.27 and prior, 7.3.16 and prior, 7.4.14 and prior and 7.5.5 and prior. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Cluster executes to compromise M
nvd
CVE-2018-1324MEDIUMCVSS 5.5≤ 7.4.34≥ 7.5.0, ≤ 7.5.24+2 more2018-03-16
CVE-2018-1324 [MEDIUM] CWE-835 CVE-2018-1324: A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compr
A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services that use Compress' zip package.
nvd
CVE-2017-3304MEDIUMCVSS 5.4≤ 7.2.27≤ 7.3.16+2 more2017-04-24
CVE-2017-3304 [MEDIUM] CVE-2017-3304: Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: DD). Supported
Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: DD). Supported versions that are affected are 7.2.27 and earlier, 7.3.16 and earlier, 7.4.14 and earlier and 7.5.5 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Cluster. Successful
nvd
CVE-2016-5541MEDIUMCVSS 4.8≤ 7.2.26≤ 7.3.14+4 more2017-01-27
CVE-2016-5541 [MEDIUM] CVE-2016-5541: Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI). Suppor
Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI). Supported versions that are affected are 7.2.26 and earlier, 7.3.14 and earlier and 7.4.12 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of th
cvelistv5nvd
CVE-2017-3322LOWCVSS 3.7≤ 7.2.25≤ 7.3.14+4 more2017-01-27
CVE-2017-3322 [LOW] CVE-2017-3322: Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI). Suppor
Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI). Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier, 7.4.12 and earlier and . Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of thi
cvelistv5nvd
CVE-2017-3321LOWCVSS 3.7≤ 7.2.19≤ 7.3.8+4 more2017-01-27
CVE-2017-3321 [LOW] CWE-20 CVE-2017-3321: Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: General). Suppo
Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: General). Supported versions that are affected are 7.2.19 and earlier, 7.3.8 and earlier and 7.4.5 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of
cvelistv5nvd
CVE-2017-3323LOWCVSS 3.7≤ 7.2.25≤ 7.3.14+4 more2017-01-27
CVE-2017-3323 [LOW] CWE-20 CVE-2017-3323: Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: General). Suppo
Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: General). Supported versions that are affected are 7.2.25 and earlier, 7.3.14 and earlier and 7.4.12 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks
cvelistv5nvd
← Previous3 / 3