PT-2017-15769

Name of the Vulnerable Software and Affected Versions MySQL Enterprise Monitor versions 3.1.6.8003 and earlier MySQL Enterprise Monitor versions 3.2.1182 and earlier MySQL Enterprise Monitor versions 3.3.2.1162 and earlier Description The issue allows a high privileged attacker with network acces...

CVE-2017-3307: Undefined Security Weakness

Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Server. Supported versions that are affected are 3.1.6.8003 and earlier, 3.2.1182 and earlier and 3.3.2.1162 and earlier. Difficult to exploit vulnerability allows high privileged attacker with netwo...

PT-2017-15770

Name of the Vulnerable Software and Affected Versions MySQL Enterprise Monitor versions 3.1.6.8003 and earlier MySQL Enterprise Monitor versions 3.2.1182 and earlier MySQL Enterprise Monitor versions 3.3.2.1162 and earlier Description The issue allows a high-privileged attacker with network acces...

CVE-2017-3306: Undefined Security Weakness

Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Server. Supported versions that are affected are 3.1.6.8003 and earlier, 3.2.1182 and earlier and 3.3.2.1162 and earlier. Easily "exploitable" vulnerability allows high privileged attacker with netwo...

MySQL Enterprise Monitor 3.1.x < 3.1.7.8023 / 3.2.x < 3.2.7.1204 / 3.3.x < 3.3.3.1199 Multiple Vulnerabilities (April 2017 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.1.x prior to 3.1.7.8023, 3.2.x prior to 3.2.7.1204, or 3.3.x prior to 3.3.3.1199. It is, therefore, affected by multiple vulnerabilities : - A denial of service vulnerability exists in...

Code injection

Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Agent. Supported versions that are affected are 3.1.3.7856 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via TLS to compromise MySQL Enterprise...

CVE-2016-5590

Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Agent. Supported versions that are affected are 3.1.3.7856 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via TLS to compromise MySQL Enterprise...

CVE-2016-5590: Undefined Security Weakness

Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL subcomponent: Monitoring: Agent. Supported versions that are affected are 3.1.3.7856 and earlier. Easily exploitable vulnerability allows high privileged attacker with network access via TLS to compromise MySQL Enterprise...

MySQL Enterprise Monitor Detection

This script performs detection of the MySQL Enterprise Monitor Webinterface. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

PT-2017-8738

Name of the Vulnerable Software and Affected Versions MySQL Enterprise Monitor version 3.1.3.7856 and earlier Description A vulnerability in the MySQL Enterprise Monitor component allows a high privileged attacker with network access via TLS to compromise the system. Successful attacks can result...

MySQL Enterprise Monitor 3.1.x < 3.1.4.7895 Agent Subcomponent RCE (January 2017 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.1.x prior to 3.1.4.7895. It is, therefore, affected by a remote code execution vulnerability in the Agent subcomponent that allows an authenticated, remote attacker to execute arbitrar...

MySQL Enterprise Monitor 3.2.x < 3.2.2.1075 Multiple Vulnerabilities (January 2017 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.2.x prior to 3.2.2.1075. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the bundled version of Apache Tomcat in the Manage...

MySQL Enterprise Monitor 3.1.x < 3.1.6.7959 Java Object Deserialization RCE (January 2017 CPU)

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.1.x prior to 3.1.6.7959. It is, therefore, affected by a remote code execution vulnerability in the JMXInvokerServlet interface due to improper validation of Java objects before...

Unspecified Vulnerability in Oracle MySQL Enterprise Monitor

Oracle MySQL is an open source relational database management system from Oracle Corporation. The database system is characterized by high performance, low cost and good reliability.MySQL Enterprise Monitor is an enterprise-level monitoring software designed for MySQL database. A security...

Unspecified Vulnerability in Oracle MySQL Enterprise Monitor Component

Oracle MySQL is an open source relational database management system. A security vulnerability exists in the Monitoring: Server subcomponent of the MySQL Enterprise Monitor component of Oracle MySQL, which can be exploited by remote attackers to compromise the confidentiality, integrity, and...

MySQL Enterprise Monitor 3.0.x < 3.0.26 / 3.1.x < 3.1.2 Unspecified RCE

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.0.x prior to 3.0.26 or 3.1.x prior to 3.1.2. It is, therefore, affected by an unspecified remote code execution vulnerability that be exploited by an authenticated, remote attacker. C...

CVE-2016-3461

Unspecified vulnerability in the MySQL Enterprise Monitor component in Oracle MySQL 3.0.25 and earlier and 3.1.2 and earlier allows remote administrators to affect confidentiality, integrity, and availability via vectors related to Monitoring: Server...

CVE-2016-3461: Undefined Security Weakness

Unspecified vulnerability in the MySQL Enterprise Monitor component in Oracle MySQL 3.0.25 and earlier and 3.1.2 and earlier allows remote administrators to affect confidentiality, integrity, and availability via vectors related to Monitoring: Server...

PT-2016-5483

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 3.0.25 and earlier Oracle MySQL versions 3.1.2 and earlier Description The issue affects the confidentiality, integrity, and availability of the system. It is related to the Monitoring: Server component in the MySQL...

MySQL Enterprise Monitor 3.0.x < 3.0.5 Apache Struts DMI Multiple Vulnerabilities

According to its self-reported version, the MySQL Enterprise Monitor running on the remote host is affected by multiple unspecified vulnerabilities related to dynamic method invocation DMI in the bundled version of Apache Struts. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...