CVE-2023-22102

EUVD-2023-2772
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J).  Supported versions that are affected are 8.1.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors.  Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Connectors, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts).  CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
8.3 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
oracleCNA
8.3 HIGH
NETWORK
HIGH
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 87%
Affected Products (NVD)
VendorProductVersion
oraclemysql_connector\/j
𝑥
≤ 8.1.0
netapponcommand_insight
-
𝑥
= Vulnerable software versions
Ubuntu logo
Ubuntu Releases
Ubuntu Product
Codename
mariadb
bionic
dne
focal
dne
jammy
dne
lunar
not-affected
mantic
not-affected
trusty
dne
xenial
dne
mariadb-10.0
bionic
dne
focal
dne
jammy
dne
lunar
dne
mantic
dne
trusty
dne
xenial
not-affected
mariadb-10.1
bionic
not-affected
focal
dne
jammy
dne
lunar
dne
mantic
dne
trusty
dne
xenial
dne
mariadb-10.3
bionic
dne
focal
not-affected
jammy
dne
lunar
dne
mantic
dne
trusty
dne
xenial
dne
mariadb-10.6
bionic
dne
focal
dne
jammy
not-affected
lunar
not-affected
mantic
dne
trusty
dne
xenial
dne
mariadb-5.5
bionic
dne
focal
dne
jammy
dne
lunar
dne
mantic
dne
trusty
ignored
xenial
dne
mysql-5.5
bionic
dne
focal
dne
jammy
dne
lunar
dne
mantic
dne
trusty
ignored
xenial
dne
mysql-5.6
bionic
dne
focal
dne
jammy
dne
lunar
dne
mantic
dne
trusty
ignored
xenial
dne
mysql-5.7
bionic
not-affected
focal
dne
jammy
dne
lunar
dne
mantic
dne
trusty
dne
xenial
not-affected
mysql-8.0
bionic
dne
focal
not-affected
jammy
not-affected
lunar
not-affected
mantic
not-affected
trusty
dne
xenial
dne
percona-server-5.6
bionic
dne
focal
dne
jammy
dne
lunar
dne
mantic
dne
trusty
dne
xenial
not-affected
percona-xtradb-cluster-5.5
bionic
dne
focal
dne
jammy
dne
lunar
dne
mantic
dne
trusty
ignored
xenial
dne
percona-xtradb-cluster-5.6
bionic
dne
focal
dne
jammy
dne
lunar
dne
mantic
dne
trusty
dne
xenial
not-affected