Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:mysql_connector\/j:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductMysql Connector/J (956bf803-9c74-5ee4-a1fb-a5cec23ec554)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-60586 vulnerable 2026-09-16 04:32:44.394635 Details available
HIGH (7.7)
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. While the vulnerability is in MySQL Connectors, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.1 Base Score 7.7 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N).
Published: 2026-07-21T21:36:01.242Z
Updated: 2026-07-29T18:19:01.584Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-60623 vulnerable 2026-09-16 04:32:44.285075 Details available
HIGH (7.1)
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Connectors accessible data as well as unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.1 Base Score 7.1 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L).
Published: 2026-07-21T21:36:12.777Z
Updated: 2026-07-29T18:19:17.682Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-61082 vulnerable 2026-07-29 01:03:24.142356 Details available
MEDIUM (6.5)
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).
Published: 2026-07-21T21:38:02.687Z
Updated: 2026-07-29T19:26:42.805Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-30706 vulnerable 2026-06-08 07:17:01.607023 Details available
HIGH (7.5)
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
Published: 2025-04-15T20:31:08.449Z
Updated: 2026-02-26T18:28:20.627Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-22102 vulnerable 2026-06-08 05:54:23.201995 Details available
HIGH (8.3)
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.1.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Connectors, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
Published: 2023-10-17T21:03:05.418Z
Updated: 2025-03-06T16:09:05.546Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2934 vulnerable 2026-06-08 05:25:00.711064 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2933 vulnerable 2026-06-08 05:25:00.709966 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-2875 vulnerable 2026-06-08 05:25:00.621194 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-2692 vulnerable 2026-06-08 05:13:54.093717 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.