Oracle Connector/j vulnerabilities

3 CVEs affecting Oracle Connector/j, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-3258, published 2018-10-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-3258, published 2018-10-17. High severity, CVSS 8.8. EPSS: 3.7% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.12 and prior. Easily exploitable vulnerability allows low…
CVE-2017-3523, published 2017-04-24. High severity, CVSS 8.5. EPSS: 2.9% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.40 and earlier. Difficult to exploit vulnerability allows low…
CVE-2017-3589, published 2017-04-24. Low severity, CVSS 3.3. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 5.1.41 and earlier. Easily "exploitable" vulnerability allows low…