CVE-2023-22102

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).  Supported versions that are affected are 8.1.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Connectors, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
8.3 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
oracleCNA
8.3 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVEADP
---
---
CISA-ADPADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 74%
VendorProductVersion
oraclemysql_connector\/j
𝑥
≤ 8.1.0
netapponcommand_insight
-
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mariadb
mantic
not-affected
lunar
not-affected
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
dne
mariadb-10.0
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
dne
xenial
not-affected
trusty
dne
mariadb-10.1
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
dne
trusty
dne
mariadb-10.3
mantic
dne
lunar
dne
jammy
dne
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
mariadb-10.6
mantic
dne
lunar
not-affected
jammy
not-affected
focal
dne
bionic
dne
xenial
dne
trusty
dne
mariadb-5.5
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
ignored
mysql-5.5
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
ignored
mysql-5.6
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
ignored
mysql-5.7
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
not-affected
xenial
not-affected
trusty
dne
mysql-8.0
mantic
not-affected
lunar
not-affected
jammy
not-affected
focal
not-affected
bionic
dne
xenial
dne
trusty
dne
percona-server-5.6
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
dne
xenial
not-affected
trusty
dne
percona-xtradb-cluster-5.5
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
dne
xenial
dne
trusty
ignored
percona-xtradb-cluster-5.6
mantic
dne
lunar
dne
jammy
dne
focal
dne
bionic
dne
xenial
not-affected
trusty
dne