CVE-2021-2471

MEDIUM

Published Oct 20, 20214y ago · Modified Jun 17, 20262w ago

5.9 CVSS 3.1

Medium

Published Oct 20, 2021 4y ago

Last Modified Jun 17, 2026 2w ago

Description

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 5.9 (Confidentiality and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H).

CVSS Details

Base Score

5.9

Exploitability

0.7

Impact

5.2

Vector string

CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:H

Attack Vector Network

Attack Complexity High

Privileges Required High

User Interaction None

Scope Unchanged

Confidentiality High

Integrity None

Availability High

Threat Intelligence

No active exploitation signals — not in CISA KEV and no EPSS score yet.

Exploit & Patch Status

No Known Exploit

No Patch Available

Affected Products 7

Vendor	Product	Version	Range
oracle	communications_cloud_native_core_console	1.9.0	any
oracle	communications_cloud_native_core_network_slice_selection_function	1.8.0	any
oracle	communications_cloud_native_core_policy	1.15.0	any
oracle	communications_cloud_native_core_security_edge_protection_proxy	1.7.0	any
oracle	mysql_connectors	*	≥8.0.0 – ≤8.0.26
quarkus	quarkus	*	<2.2.4
quarkus	quarkus	*	≥2.3.0 – <2.6.0

References 2

oracle.com https://www.oracle.com/security-alerts/cpuapr2022.html

Vendor Advisory
oracle.com https://www.oracle.com/security-alerts/cpuoct2021.html

Vendor Advisory

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.