CVEvulnerability

CVE-2026-61082

6.5 MEDIUM Published 2026-07-21 Modified 2026-10-24 Official page ↗
Status
Analyzed
Published
2026-07-21
Last modified
2026-10-24
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Weaknesses
CWE-200, CWE-285, CWE-352, CWE-601

Description

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.1 Base Score 6.5 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N).

Affected configurations

• oracle mysql connector\/j 9.7.0 • oracle mysql connector\/j 9.7.1

Related

Weakness · CWE (4)

  • CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
  • CWE-285 Improper Authorization weakness
  • CWE-352 Cross-Site Request Forgery weakness
  • CWE-601 URL Redirection to Untrusted Site weakness

References