Vulnerabilities fixed in Oracle MySQL

🗓️ 20 Oct 2021 00:00:00Reported by NCSCType

ncsc🔗 advisories.ncsc.nl👁 74 Views

Oracle fixes MySQL vulnerabilities across products; risks include denial of service and remote code execution.

Reporter	Title	Published	Views	Family All 1000
IBM Security Bulletins	Security Bulletin: IBM Aspera Orchestrator affected by OpenSSL vulnerability (CVE-2021-3712)	2 Feb 202317:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Flex System switch firmware products are affected by vulnerabilities in OpenSSL	7 Dec 202323:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in OpenSSL (CVE-2021-3712) affects Power HMC	30 May 202207:28	–	ibm
IBM Security Bulletins	Security Bulletin: IBM PowerVM Novalink is vulnerable because Apache Commons IO could allow a remote attacker to traverse directories on the system	13 Feb 202305:14	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ for HP NonStop Server is affected by OpenSSL vulnerability CVE-2021-3711	15 Nov 202102:21	–	ibm
IBM Security Bulletins	Security Bulletin: Remediation of Multiple Apache Struts Vulnerabilities in IBM Library Support for Struts	9 Mar 202610:35	–	ibm
IBM Security Bulletins	Security Bulletin: Security fixes available for The IBM® Engineering System Design Rhapsody products on IBM Jazz Technology	7 Jun 202406:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cognos Controller is affected by vulnerabilities	15 Apr 202503:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to multiple Operator package issues	30 Nov 202318:45	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Safer Payments is vulnerable to OpenSSL Information Disclosure Problem (CVE-2021-3712)	24 Apr 202314:15	–	ibm

20 Oct 2021 00:00Current

7.5High risk

Vulners AI Score7.5

CVSS 29

CVSS 3.17.5 - 9.8

EPSS0.88497

SSVC

MySQL Workbench MySQL Server MySQL Cluster MySQL Enterprise Monitor MySQL Connectors OpenSSL Denial of Service Remote code execution