mysql:mysql-connector-java (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package mysql:mysql-connector-java, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (9)

• CVE-2018-3258 — CVSS 8.8 (high): Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are…
• CVE-2017-3523 — CVSS 8.5 (high): Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are…
• CVE-2023-22102 — CVSS 8.3 (high): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.1.0 and…
• CVE-2022-21363 — CVSS 6.6 (medium): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.27 and…
• CVE-2017-3586 — CVSS 6.4 (medium): Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are…
• CVE-2019-2692 — CVSS 6.3 (medium): Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are…
• CVE-2021-2471 — CVSS 5.9 (medium): Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.26 and…
• CVE-2015-2575 — CVSS 4.9 (medium): Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect…
• CVE-2017-3589 — CVSS 3.3 (low): Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are…