CVE-2017-3590

low-risk

Published 2017-04-24

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Python). Supported versions that are affected are 2.1.5 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data. CVSS 3.0 Base Score 3.3 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N).

Do I need to act?

0.07% chance of exploitation

EPSS score — low exploit probability

Not on CISA KEV list

No confirmed active exploitation reported to CISA

Patch status unknown

Check vendor advisories for fix availability and mitigation guidance

CVSS 3.3/10 Low

LOCAL / LOW complexity

Affected Products (1)

Connector\/Python

Affected Vendors

Oracle

References (6)

Patch http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html

Third Party Advisory http://www.securityfocus.com/bid/97840

http://www.securitytracker.com/id/1038287

Patch http://www.oracle.com/technetwork/security-advisory/cpuapr2017-3236618.html

Third Party Advisory http://www.securityfocus.com/bid/97840

http://www.securitytracker.com/id/1038287

/ 100

low-risk

Severity 13/34 · Low

Exploitability 0/34 · Minimal

Exposure 5/34 · Minimal