CVE Feed

    Dashboard / CVE / CVE-2017-10424

    CVE-2017-10424

    Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Web). Supported versions that are affected are 3.2.8.2223 and earlier, 3.3.4.3247 and earlier and 3.4.2.4181 and earlier. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Enterprise Monitor. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Enterprise Monitor. CVSS 3.0 Base Score 8.8 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H).

    Published:Oct 19, 2017
    Last Modified:Apr 20, 2025
    EPS:Oct 19, 2017
    EPSS Score:0.0098
    CVSS Score:8.8

    Affected Products

    Vendor
    Oracle
    Product
    Mysql Enterprise Monitor

    Exploits

    No exploit reference

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2022-22968 (CVSS 5.3) — In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for …
    CVE-2022-22965 (CVSS 9.8) — A Spring MVC or Spring WebFlux application running on JDK 9+ may be vulnerable to remote code execution (RCE) …
    CVE-2022-22963 (CVSS 9.8) — In Spring Cloud Function versions 3.1.6, 3.2.2 and older unsupported versions, when using routing functionalit…
    CVE-2022-23181 (CVSS 7) — The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-…
    CVE-2022-23302 (CVSS 8.8) — JMSSink in all versions of Log4j 1.x is vulnerable to deserialization of untrusted data when the attacker has …
    CVE-2022-23305 (CVSS 9.8) — By design, the JDBCAppender in Log4j 1.2.x accepts an SQL statement as a configuration parameter where the val…
    CVE-2022-23307 (CVSS 8.8) — CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw. Prior to Chainsaw V2.0 C…
    CVE-2021-44531 (CVSS 7.4) — Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a partic…
    CVE-2021-44533 (CVSS 5.3) — Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names …
    CVE-2021-44532 (CVSS 5.3) — Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string fo…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High