netapp oncommand-unified-manager CVE-2019-2539 vulnerability in NetApp and Other Products
Published on January 16, 2019

product logo product logo product logo
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Connection). Supported versions that are affected are 8.0.13 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.0 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vendor Advisory Vendor Advisory NVD

Vulnerability Analysis

Exploitation:
NONE
Automatable:
NO
Technical Impact:
PARTIAL

Products Associated with CVE-2019-2539

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2019-2539 are published in these products:

NetApp Oncommand Unified Manager
NetApp Oncommand Workflow Automation
NetApp Snapcenter
NetApp Storage Automation Store
Oracle MySQL
Red Hat Software Collections
Red Hat Enterprise Linux (RHEL)
Red Hat Enterprise Linux Eus
Red Hat Enterprise Linux Server Tus
Red Hat Enterprise Linux Server Aus

Affected Versions

Oracle Corporation MySQL Server Version 8.0.13 and prior is affected by CVE-2019-2539

Exploit Probability

EPSS
2.70%
Percentile
86.05%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.