OracleCVELIST:CVE-2023-21940

HistoryApr 18, 2023 - 7:54 p.m.

CVE-2023-21940

2023-04-1819:54:26

oracle

www.cve.org

vulnerability

cve-2023-21940

information security

CVSS3

4.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

40.9%

JSON

CNA Affected

[
  {
    "vendor": "Oracle Corporation",
    "product": "MySQL Server",
    "versions": [
      {
        "version": "8.0.32 and prior",
        "status": "affected"
      }
    ]
  }
]

References

lists.fedoraproject.org/archives/list/[email protected]/message/C63HAGVLQA6FJNDCHR7CNZZL6VSLILB2/

lists.fedoraproject.org/archives/list/[email protected]/message/JEHRBBYYTPA4DETOM5XAKGCP37NUTLOA/

lists.fedoraproject.org/archives/list/[email protected]/message/QYLDK6ODVC4LJSDULLX6Q2YHTFOWABCN/

security.netapp.com/advisory/ntap-20230427-0007/

www.oracle.com/security-alerts/cpuapr2023.html

CVSS3

4.4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H

AI Score

6.2

Confidence

High

EPSS

0.001

Percentile

40.9%

JSON

Related for CVELIST:CVE-2023-21940