CVE-2022-21418

MEDIUM Year: 2022
CVSS v3 Score
5.0
Medium
CVSS v2 Score
4.9
Medium
Weakness Type
NVD-CWE-Other
View all →

Vulnerability Description

Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.0 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:L/A:H).

Related Vulnerabilities

CVE-2016-5553

MEDIUM
CVSS:5.0(Medium)

Unspecified vulnerability in Oracle Sun Solaris 10 and 11.3 allows local users to affect availability via unknown vectors.

NVD-CWE-Other2016

CVE-2017-10221

MEDIUM
CVSS:5.0(Medium)

Vulnerability in the Oracle Hospitality RES 3700 component of Oracle Hospitality Applications (subcomponent: OPS Operations). The supported version that is affected is 5.5. Difficult to exploit vulner...

NVD-CWE-Other2017

CVE-2017-10275

MEDIUM
CVSS:5.0(Medium)

Vulnerability in the Sun ZFS Storage Appliance Kit (AK) component of Oracle Sun Systems Products Suite (subcomponent: Filesystem). The supported version that is affected is AK 2013. Easily exploitable...

NVD-CWE-Other2017

CVE-2017-10428

MEDIUM
CVSS:5.0(Medium)

Vulnerability in the Oracle VM VirtualBox component of Oracle Virtualization (subcomponent: Core). The supported version that is affected is Prior to 5.1.30. Difficult to exploit vulnerability allows ...

NVD-CWE-Other2017

CVE-2017-2516

MEDIUM
CVSS:5.0(Medium)

An issue was discovered in certain Apple products. macOS before 10.12.5 is affected. The issue involves the "Kernel" component. It allows attackers to bypass intended memory-read restrictions via a cr...

NVD-CWE-Other2017

CVE-2017-3475

MEDIUM
CVSS:5.0(Medium)

Vulnerability in the Oracle FLEXCUBE Private Banking component of Oracle Financial Services Applications (subcomponent: Miscellaneous). Supported versions that are affected are 2.0.0, 2.0.1, 2.2.0.1 a...

NVD-CWE-Other2017