SOC status:Duty analyst on shift

UK Cyber Defence
VulnerabilityModified

CVE-2015-4861

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.

LOW 3.5EPSS 3.55%

Does this matter?

Lower severity and a low EPSS score (3.55%). Track it; it rarely justifies an emergency change on its own.

Description

Unspecified vulnerability in Oracle MySQL Server 5.5.45 and earlier, and 5.6.26 and earlier, allows remote authenticated users to affect availability via unknown vectors related to Server : InnoDB.

CVSS 2.0
3.5 LOWAV:N/AC:M/Au:S/C:N/I:N/A:P
EPSS
3.55% probability · 89th percentile
CISA KEV
Not listed
Affected
oracle/linux · oracle/solaris · opensuse/leap · opensuse/opensuse · oracle/mysql · redhat/enterprise linux desktop · redhat/enterprise linux eus · redhat/enterprise linux server · redhat/enterprise linux server aus · redhat/enterprise linux server tus · redhat/enterprise linux workstation · mariadb/mariadb · debian/debian linux · canonical/ubuntu linux · fedoraproject/fedora
Source
secalert_us@oracle.com

References

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.