netapp oncommand-unified-manager CVE-2019-2436 vulnerability in NetApp and Other Products
Published on January 16, 2019

product logo product logo product logo
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Replication). Supported versions that are affected are 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).

Vendor Advisory Vendor Advisory NVD

Vulnerability Analysis

Exploitation:
NONE
Automatable:
NO
Technical Impact:
PARTIAL

Products Associated with CVE-2019-2436

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2019-2436 are published in these products:

NetApp Oncommand Unified Manager
NetApp Oncommand Workflow Automation
NetApp Snapcenter
NetApp Storage Automation Store
Oracle MySQL
Red Hat Software Collections
Red Hat Enterprise Linux (RHEL)
Red Hat Enterprise Linux Eus
Red Hat Enterprise Linux Server Tus
Red Hat Enterprise Linux Server Aus

Affected Versions

Oracle Corporation MySQL Server Version 8.0.13 and prior is affected by CVE-2019-2436

Exploit Probability

EPSS
2.09%
Percentile
81.87%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.