Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2019-2692
HistoryApr 23, 2019 - 7:32 p.m.

CVE-2019-2692

2019-04-2319:32:55
[email protected]
web.nvd.nist.gov
3

CVSS2

3.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:S/C:P/I:P/A:P

CVSS3

6.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

27.9%

JSON

Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.0 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).

Affected configurations

Nvd
Node
oraclemysql_connector\/jRange≤8.0.15
VendorProductVersionCPE
oraclemysql_connector\/j*cpe:2.3:a:oracle:mysql_connector\/j:*:*:*:*:*:*:*:*

Related

debiancve 1
ubuntucve 1
prion 1
osv 1
veracode 1
cvelist 1
cve 1
github 1
redhatcve 1
nessus 3
openvas 1
ibm 1
redhat 1
oracle 1
debiancve
debiancve
CVE-2019-2692
2019-04-23 19:32:00
ubuntucve
ubuntucve
CVE-2019-2692
2019-04-23 00:00:00
prion
prion
Design/Logic Flaw
2019-04-23 19:32:00
osv
osv
Privilege escalation in mysql-connector-jav
2020-07-01 17:12:20
veracode
veracode
Authorization Bypass
2019-07-08 10:41:07
cvelist
cvelist
CVE-2019-2692
2019-04-23 18:16:44
cve
cve
CVE-2019-2692
2019-04-23 19:32:55
github
github
Privilege escalation in mysql-connector-jav
2020-07-01 17:12:20
redhatcve
redhatcve
CVE-2019-2692
2019-04-26 11:19:51
nessus
nessus
Oracle MySQL Connectors Multiple Vulnerabilities (Apr 2019 CPU)
2019-05-22 00:00:00
RHEL 7 : mysql-connector-java (Unpatched Vulnerability)
2024-06-03 00:00:00
RHEL 6 : mysql-connector-java (Unpatched Vulnerability)
2024-05-11 00:00:00
openvas
openvas
Oracle MySQL Server 8.0 <= 8.0.15 Security Update (cpuapr2019) - Linux
2019-05-13 00:00:00
ibm
ibm
Security Bulletin: IBM API Connect is potentially impacted by vulnerabilities in MySQL
2020-03-03 02:26:47
redhat
redhat
(RHSA-2020:5568) Important: Red Hat Fuse 7.8.0 release and security update
2020-12-16 12:07:05
oracle
oracle
Oracle Critical Patch Update Advisory - April 2019
2019-04-16 00:00:00

CVSS2

3.5

Attack Vector

LOCAL

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:H/Au:S/C:P/I:P/A:P

CVSS3

6.3

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

HIGH

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H

AI Score

5.6

Confidence

High

EPSS

0.001

Percentile

27.9%

JSON
Related for NVD:CVE-2019-2692
debiancve1ubuntucve1prion1osv1veracode1cvelist1cve1github1redhatcve1nessus3openvas1ibm1redhat1oracle1