CVE-2014-6507

2014-10-1522:55:06

oracle

web.nvd.nist.gov

oracle mysql

server

vulnerability

remote authenticated users

confidentiality

integrity

availability

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

AI Score

5.5

Confidence

High

EPSS

0.009

Percentile

82.8%

JSON

Unspecified vulnerability in Oracle MySQL Server 5.5.39 and earlier, and 5.6.20 and earlier, allows remote authenticated users to affect confidentiality, integrity, and availability via vectors related to SERVER:DML.

Affected configurations

Nvd

Node

mariadbmariadbRange5.5.0–5.5.40

mariadbmariadbRange10.0.0–10.0.15

Node

oraclesolarisMatch11.3

Node

oraclemysqlRange5.5.0–5.5.39

oraclemysqlRange5.6.0–5.6.20

Node

suselinux_enterprise_desktopMatch12-

suselinux_enterprise_serverMatch12-

suselinux_enterprise_software_development_kitMatch12-

suselinux_enterprise_workstation_extensionMatch12-

VendorProductVersionCPE
mariadbmariadb*cpe:2.3:a:mariadb:mariadb:*:*:*:*:*:*:*:*
oraclesolaris11.3cpe:2.3:o:oracle:solaris:11.3:*:*:*:*:*:*:*
oraclemysql*cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
suselinux_enterprise_desktop12cpe:2.3:o:suse:linux_enterprise_desktop:12:-:*:*:*:*:*:*
suselinux_enterprise_server12cpe:2.3:o:suse:linux_enterprise_server:12:-:*:*:*:*:*:*
suselinux_enterprise_software_development_kit12cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-:*:*:*:*:*:*
suselinux_enterprise_workstation_extension12cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-:*:*:*:*:*:*

Vendor	Product	Version	CPE
mariadb	mariadb	*	cpe:2.3:a:mariadb:mariadb::::::::
oracle	solaris	11.3	cpe:2.3:o:oracle:solaris:11.3:::::::*
oracle	mysql	*	cpe:2.3:a:oracle:mysql::::::::
suse	linux_enterprise_desktop	12	cpe:2.3:o:suse:linux_enterprise_desktop:12:-::::::
suse	linux_enterprise_server	12	cpe:2.3:o:suse:linux_enterprise_server:12:-::::::
suse	linux_enterprise_software_development_kit	12	cpe:2.3:o:suse:linux_enterprise_software_development_kit:12:-::::::
suse	linux_enterprise_workstation_extension	12	cpe:2.3:o:suse:linux_enterprise_workstation_extension:12:-::::::