High severity · published Jan 16, 2019
CVE-2019-2435
Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Python)
8.1
CVSS
2.5%
EPSS
No
On KEV
Description
Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Python). Supported versions that are affected are 8.0.13 and prior and 2.1.8 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via TLS to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Connectors accessible data as well as unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.0 Base Score 8.1 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N).
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
MySQL Connectors · Oracle Corporation
8.0.13 and prior; 2.1.8 and prior · source: vendor, NVD
AI
Active IQ Unified Manager · Netapp
7.3 and later; 9.5 and later · source: NVD
OW
Oncommand Workflow Automation · Netapp
All versions, or not specified · source: NVD
SN
Snapcenter · Netapp
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2019-2435
CVE.org
https://www.cve.org/CVERecord?id=CVE-2019-2435
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00044.html
lists.opensuse.org
http://lists.opensuse.org/opensuse-security-announce/2020-03/msg00053.html
Patch
http://www.oracle.com/technetwork/security-advisory/cpujan2019-5072801.html
Third Party Advisory
http://www.securityfocus.com/bid/106616
Third Party Advisory
https://security.netapp.com/advisory/ntap-20190118-0002/
More from MySQL Connectors
8.5
CVE-2026-60193
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net)
8.1
CVE-2026-101768
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J)
8.1
CVE-2026-60192
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Net)
7.7
CVE-2026-60586
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J)
7.5
CVE-2026-83404
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python)