Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-09248
HistoryFeb 03, 2022 - 12:00 a.m.

Oracle MySQL Input Validation Error Vulnerability (CNVD-2022-09248)

2022-02-0300:00:00
China National Vulnerability Database
www.cnvd.org.cn
14

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

Oracle MySQL Server is a relational database from Oracle Corporation (USA). Oracle MySQL Server is vulnerable to an input validation error, which originates in the Server: Optimizer component of MySQL Server. An attacker could exploit this vulnerability to corrupt or delete data.

CPENameOperatorVersion
Oracle MySQL >=8.0.0,le8.0.27

5.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H

3.5 Low

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P