Vulnerability Details : CVE-2015-0405
Unspecified vulnerability in Oracle MySQL Server 5.6.22 and earlier allows remote authenticated users to affect availability via unknown vectors related to XA.
Exploit prediction scoring system (EPSS) score for CVE-2015-0405
Probability of exploitation activity in the next 30 days: 0.45%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 72 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2015-0405
Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
---|---|---|---|---|---|
4.0
|
MEDIUM | AV:N/AC:L/Au:S/C:N/I:N/A:P |
8.0
|
2.9
|
NIST |
References for CVE-2015-0405
-
https://security.gentoo.org/glsa/201507-19
MySQL: Multiple vulnerabilities (GLSA 201507-19) — Gentoo security
-
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html
[security-announce] SUSE-SU-2015:0946-1: important: Security update for
-
http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
Oracle Critical Patch Update - April 2015Vendor Advisory
-
http://www.securitytracker.com/id/1032121
MySQL Multiple Bugs Let Remote Users Deny Service, Remote Authenticated Users Partially Access and Modify Data, and Local Users Partially Modify Data on the Target System - SecurityTracker
Products affected by CVE-2015-0405
- cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:*:*:*:*
- cpe:2.3:o:novell:suse_linux_enterprise_server:11.0:sp3:*:*:vmware:*:*:*
- cpe:2.3:o:novell:suse_linux_enterprise_desktop:11.0:sp3:*:*:*:*:*:*
- cpe:2.3:a:novell:suse_linux_enterprise_software_development_kit:11.0:sp3:*:*:*:*:*:*
- cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*