oracle mysql CVE-2021-2471 in Oracle and Quarkus Products
Published on October 20, 2021

product logo product logo product logo
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H).

NVD

Vulnerability Analysis

CVE-2021-2471 can be exploited with network access, and requires user privileges. This vulnerability is consided to have a high level of attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity, and a high impact on availability.

Attack Vector:
NETWORK
Attack Complexity:
HIGH
Privileges Required:
HIGH
User Interaction:
NONE
Scope:
UNCHANGED
Confidentiality Impact:
HIGH
Integrity Impact:
NONE
Availability Impact:
HIGH

Products Associated with CVE-2021-2471

You can be notified by email with stack.watch whenever vulnerabilities like CVE-2021-2471 are published in these products:

Oracle MySQL
 
Oracle Mysql Connectors
 
Quarkus
 
Oracle Communications Cloud Native Core Console
 
Oracle Communications Cloud Native Core Network Slice Selection Function
 
Oracle Communications Cloud Native Core Policy
 
Oracle Communications Cloud Native Core Security Edge Protection Proxy
 

Affected Versions

Oracle Corporation MySQL Connectors Version 8.0.26 and prior is affected by CVE-2021-2471

Exploit Probability

EPSS
65.14%
Percentile
98.43%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.