CVE-2014-2484
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
5.1 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.5%
Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.17 and earlier allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SRFTS.
Affected configurations
References
lists.opensuse.org/opensuse-security-announce/2014-08/msg00012.html
seclists.org/fulldisclosure/2014/Dec/23
secunia.com/advisories/60425
www.oracle.com/technetwork/topics/security/cpujul2014-1972956.html
www.securityfocus.com/archive/1/534161/100/0/threaded
www.securitytracker.com/id/1030578
www.vmware.com/security/advisories/VMSA-2014-0012.html
Related
6.5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
SINGLE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:S/C:P/I:P/A:P
5.1 Medium
AI Score
Confidence
Low
0.004 Low
EPSS
Percentile
73.5%