CVE-2022-21290medium

CVE-2022-21290: medium-severity vulnerability in Oracle Corporation MySQL Cluster

Published · Updated

Follow this CVE+ Monitor MySQL Cluster

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 6.3epss 3.1%
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).
CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
Affected products
Oracle Corporation · MySQL Cluster
Related CVEs — Oracle Corporation MySQL Cluster

In the same product, most dangerous first.

CVE-2021-35590MEDIUMCVE-2021-35590EPSS 88.5%CVE-2022-21490MEDIUMCVE-2022-21490EPSS 79.4%CVE-2022-21279MEDIUMCVE-2022-21279EPSS 79.0%CVE-2022-21489MEDIUMCVE-2022-21489EPSS 78.9%CVE-2022-21280MEDIUMCVE-2022-21280EPSS 76.5%CVE-2021-35592MEDIUMCVE-2021-35592EPSS 52.5%