netapp oncommand-unified-manager CVE-2019-2536 vulnerability in NetApp and Other Products
Published on January 16, 2019

product logo product logo product logo
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 8.0.13 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Server, attacks may significantly impact additional products. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 5.0 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:C/C:N/I:N/A:H).

Vendor Advisory Vendor Advisory NVD

Vulnerability Analysis

Exploitation:
NONE
Automatable:
NO
Technical Impact:
PARTIAL

Products Associated with CVE-2019-2536

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2019-2536 are published in these products:

NetApp Oncommand Unified Manager
NetApp Oncommand Workflow Automation
NetApp Snapcenter
NetApp Storage Automation Store
Oracle MySQL
Red Hat Software Collections
Red Hat Enterprise Linux (RHEL)
Red Hat Enterprise Linux Eus
Red Hat Enterprise Linux Server Tus
Red Hat Enterprise Linux Server Aus

Affected Versions

Oracle Corporation MySQL Server Version 8.0.13 and prior is affected by CVE-2019-2536

Exploit Probability

EPSS
0.41%
Percentile
36.01%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.