CVE-2021-35598medium

CVE-2021-35598: fallo de gravedad media en Oracle Corporation MySQL Cluster

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear MySQL Cluster

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

25Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 6.3epss 51%
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.33 and prior, 7.5.23 and prior, 7.6.19 and prior and 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).
CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H
Productos afectados
Oracle Corporation · MySQL Cluster
CVEs relacionadas — Oracle Corporation MySQL Cluster

En el mismo producto, de las más peligrosas a las menos.

CVE-2021-35590MEDIUMCVE-2021-35590EPSS 88.5%CVE-2022-21490MEDIUMCVE-2022-21490EPSS 79.4%CVE-2022-21279MEDIUMCVE-2022-21279EPSS 79.0%CVE-2022-21489MEDIUMCVE-2022-21489EPSS 78.9%CVE-2022-21280MEDIUMCVE-2022-21280EPSS 76.5%CVE-2021-35592MEDIUMCVE-2021-35592EPSS 52.5%