Percona Toolkit — known CVE vulnerabilities

Every CVE whose affected-product data names Percona Toolkit, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2014-2029 — CVSS 8.1 (high): The automatic version check functionality in the tools in Percona Toolkit 2.1 allows man-in-the-middle attackers to obtain sensitive…
• CVE-2024-7701 — CVSS 7.5 (high): Use of Password Hash With Insufficient Computational Effort vulnerability in percona percona-toolkit allows Encryption Brute Forcing.This…
• CVE-2015-1027 — CVSS 5.9 (medium): The version checking subroutine in percona-toolkit before 2.2.13 and xtrabackup before 2.2.9 was vulnerable to silent HTTP downgrade…