Oracle MySQL Connector/net vulnerabilities

7 CVEs affecting Oracle MySQL Connector/net, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-60317, published 2026-07-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-2585, published 2018-01-18. High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Net). Supported versions that are affected are 6.9.9 and prior and 6.10.4 and prior. Easily exploitable…
CVE-2017-10203, published 2017-10-19. Medium severity, CVSS 5.3. EPSS: 2.6% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Net). Supported versions that are affected are 6.9.9 and earlier. Easily exploitable vulnerability allows…
CVE-2017-10277, published 2017-10-19. Medium severity, CVSS 5.4. EPSS: 1.7% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Net). Supported versions that are affected are 6.9.9 and earlier. Easily exploitable vulnerability allows…
CVE-2009-4833, published 2010-04-29. Medium severity, CVSS 5.8. EPSS: 1% chance of exploitation in the next 30 days. MySQL Connector/NET before 6.0.4, when using encryption, does not verify SSL certificates during connection, which allows remote attackers to perform a man-in-the-middle attack with a spoofed SSL…
CVE-2026-60192, published 2026-07-21. High severity, CVSS 8.1. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows…
CVE-2026-60317, published 2026-07-21. High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows…
CVE-2026-60193, published 2026-07-21. High severity, CVSS 8.5. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows low…