Oracle MySQL-GUI-Tools vulnerabilities

2 CVEs affecting Oracle MySQL-GUI-Tools, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2010-4177, published 2019-11-12.

More from Oracle.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2010-4178, published 2019-11-06. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. MySQL-GUI-tools (mysql-administrator) leaks passwords into process list after with launch of mysql text console
• CVE-2010-4177, published 2019-11-12. Medium severity, CVSS 5.5. EPSS: 0.3% chance of exploitation in the next 30 days. mysql-gui-tools (mysql-query-browser and mysql-admin) before 5.0r14+openSUSE-2.3 exposes the password of a user connected to the MySQL server in clear text form via the list of running processes.