CVE-2023-22102

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2023-22102
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.1.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Connectors, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 8.3 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H).
CVSS

No CVSS.

References
Link Resource
https://security.netapp.com/advisory/ntap-20231027-0007/ Third Party Advisory
https://security.netapp.com/advisory/ntap-20231027-0007/ Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2023.html Patch Vendor Advisory
https://www.oracle.com/security-alerts/cpuoct2023.html Patch Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:oracle:mysql_connector\/j:*:*:*:*:*:*:*:*

Configuration 2 (hide)

cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*
History

06 Mar 2025, 17:15

Type Values Removed Values Added
CVSS v2 : unknown
v3 : 8.3 		v2 : unknown
v3 : unknown
References (MISC) https://www.oracle.com/security-alerts/cpuoct2023.html - Patch, Vendor Advisory () https://www.oracle.com/security-alerts/cpuoct2023.html - Patch, Vendor Advisory
References (MISC) https://security.netapp.com/advisory/ntap-20231027-0007/ - Third Party Advisory () https://security.netapp.com/advisory/ntap-20231027-0007/ - Third Party Advisory

31 Oct 2023, 19:20

Type Values Removed Values Added
First Time Netapp oncommand Insight
Netapp
Oracle mysql Connector\/j
References (MISC) https://security.netapp.com/advisory/ntap-20231027-0007/ - (MISC) https://security.netapp.com/advisory/ntap-20231027-0007/ - Third Party Advisory
CPE cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* cpe:2.3:a:oracle:mysql_connector\/j:*:*:*:*:*:*:*:*
cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*

27 Oct 2023, 15:15

Type Values Removed Values Added
References
  • (MISC) https://security.netapp.com/advisory/ntap-20231027-0007/ -

19 Oct 2023, 09:41

Type Values Removed Values Added
First Time Oracle mysql
Oracle
CPE cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*
CWE NVD-CWE-noinfo
References (MISC) https://www.oracle.com/security-alerts/cpuoct2023.html - (MISC) https://www.oracle.com/security-alerts/cpuoct2023.html - Patch, Vendor Advisory

18 Oct 2023, 01:28

Type Values Removed Values Added
New CVE
Information

Published : 2023-10-17 22:15

Updated : 2025-03-06 17:15

NVD link : CVE-2023-22102

Mitre link : CVE-2023-22102

JSON object : View

Products Affected

oracle

  • mysql_connector\/j

netapp

  • oncommand_insight
CWE
NVD-CWE-noinfo