Lookup for vulnerable packages by Package URL.
| Purl | pkg:maven/mysql/mysql-connector-java@6.0.3 |
| Type | maven |
| Namespace | mysql |
| Name | mysql-connector-java |
| Version | 6.0.3 |
| Qualifiers |
|
| Subpath | |
| Is_vulnerable | true |
| Next_non_vulnerable_version | null |
| Latest_non_vulnerable_version | null |
| Affected_by_vulnerabilities |
| 0 |
| url |
VCID-7v7q-8wa6-hff5 |
| vulnerability_id |
VCID-7v7q-8wa6-hff5 |
| summary |
Improper Access Control
A vulnerability in the MySQL Connectors component of Oracle MySQL exists. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. |
| references |
| 0 |
|
| 1 |
|
| 2 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2018-3258 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.04126 |
| scoring_system |
epss |
| scoring_elements |
0.88638 |
| published_at |
2026-04-12T12:55:00Z |
|
| 1 |
| value |
0.04126 |
| scoring_system |
epss |
| scoring_elements |
0.88648 |
| published_at |
2026-04-18T12:55:00Z |
|
| 2 |
| value |
0.04126 |
| scoring_system |
epss |
| scoring_elements |
0.88652 |
| published_at |
2026-04-16T12:55:00Z |
|
| 3 |
| value |
0.04126 |
| scoring_system |
epss |
| scoring_elements |
0.88609 |
| published_at |
2026-04-04T12:55:00Z |
|
| 4 |
| value |
0.04126 |
| scoring_system |
epss |
| scoring_elements |
0.88611 |
| published_at |
2026-04-07T12:55:00Z |
|
| 5 |
| value |
0.04126 |
| scoring_system |
epss |
| scoring_elements |
0.88629 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.04126 |
| scoring_system |
epss |
| scoring_elements |
0.88634 |
| published_at |
2026-04-09T12:55:00Z |
|
| 7 |
| value |
0.04126 |
| scoring_system |
epss |
| scoring_elements |
0.88646 |
| published_at |
2026-04-11T12:55:00Z |
|
| 8 |
| value |
0.04126 |
| scoring_system |
epss |
| scoring_elements |
0.88639 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.04126 |
| scoring_system |
epss |
| scoring_elements |
0.88583 |
| published_at |
2026-04-01T12:55:00Z |
|
| 10 |
| value |
0.04126 |
| scoring_system |
epss |
| scoring_elements |
0.88592 |
| published_at |
2026-04-02T12:55:00Z |
|
| 11 |
| value |
0.04126 |
| scoring_system |
epss |
| scoring_elements |
0.88647 |
| published_at |
2026-04-21T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2018-3258 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
| 12 |
|
|
| fixed_packages |
|
| aliases |
CVE-2018-3258, GHSA-4vrv-ch96-6h42
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-7v7q-8wa6-hff5 |
|
| 1 |
| url |
VCID-e37q-8shh-v7aw |
| vulnerability_id |
VCID-e37q-8shh-v7aw |
| summary |
Unknown Vulnerability
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2022-21363 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77159 |
| published_at |
2026-04-21T12:55:00Z |
|
| 1 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77123 |
| published_at |
2026-04-09T12:55:00Z |
|
| 2 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.7715 |
| published_at |
2026-04-11T12:55:00Z |
|
| 3 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77129 |
| published_at |
2026-04-12T12:55:00Z |
|
| 4 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77125 |
| published_at |
2026-04-13T12:55:00Z |
|
| 5 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77166 |
| published_at |
2026-04-16T12:55:00Z |
|
| 6 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77167 |
| published_at |
2026-04-18T12:55:00Z |
|
| 7 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77069 |
| published_at |
2026-04-02T12:55:00Z |
|
| 8 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77098 |
| published_at |
2026-04-04T12:55:00Z |
|
| 9 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77081 |
| published_at |
2026-04-07T12:55:00Z |
|
| 10 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77113 |
| published_at |
2026-04-08T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2022-21363 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
|
| 8 |
|
| 9 |
|
| 10 |
|
|
| fixed_packages |
|
| aliases |
CVE-2022-21363, GHSA-g76j-4cxx-23h9
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-e37q-8shh-v7aw |
|
| 2 |
| url |
VCID-ht8v-kvcr-77ds |
| vulnerability_id |
VCID-ht8v-kvcr-77ds |
| summary |
Improper Input Validation
Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Connectors executes to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker and can result in takeover of MySQL Connectors. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2019-2692 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77157 |
| published_at |
2026-04-21T12:55:00Z |
|
| 1 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77061 |
| published_at |
2026-04-01T12:55:00Z |
|
| 2 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77067 |
| published_at |
2026-04-02T12:55:00Z |
|
| 3 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77096 |
| published_at |
2026-04-04T12:55:00Z |
|
| 4 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77079 |
| published_at |
2026-04-07T12:55:00Z |
|
| 5 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77112 |
| published_at |
2026-04-08T12:55:00Z |
|
| 6 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77121 |
| published_at |
2026-04-09T12:55:00Z |
|
| 7 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77148 |
| published_at |
2026-04-11T12:55:00Z |
|
| 8 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77128 |
| published_at |
2026-04-12T12:55:00Z |
|
| 9 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77123 |
| published_at |
2026-04-13T12:55:00Z |
|
| 10 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77164 |
| published_at |
2026-04-16T12:55:00Z |
|
| 11 |
| value |
0.01012 |
| scoring_system |
epss |
| scoring_elements |
0.77165 |
| published_at |
2026-04-18T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2019-2692 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
|
| 7 |
| reference_url |
http://www.securityfocus.com/bid/107925 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
6.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.0/AV:L/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H |
|
| 1 |
| value |
MODERATE |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 2 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2024-10-02T15:55:48Z/ |
|
|
| url |
http://www.securityfocus.com/bid/107925 |
|
| 8 |
|
| 9 |
|
| 10 |
|
| 11 |
|
|
| fixed_packages |
|
| aliases |
CVE-2019-2692, GHSA-jcq3-cprp-m333
|
| risk_score |
3.1 |
| exploitability |
0.5 |
| weighted_severity |
6.2 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-ht8v-kvcr-77ds |
|
| 3 |
| url |
VCID-xap5-du1j-c7ed |
| vulnerability_id |
VCID-xap5-du1j-c7ed |
| summary |
Improper Access Control
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.1.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker and while the vulnerability is in MySQL Connectors, attacks may significantly impact additional products (scope change). Successful attacks of this vulnerability can result in takeover of MySQL Connectors. |
| references |
| 0 |
|
| 1 |
| reference_url |
https://api.first.org/data/v1/epss?cve=CVE-2023-22102 |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
0.03493 |
| scoring_system |
epss |
| scoring_elements |
0.87608 |
| published_at |
2026-04-21T12:55:00Z |
|
| 1 |
| value |
0.03493 |
| scoring_system |
epss |
| scoring_elements |
0.87549 |
| published_at |
2026-04-02T12:55:00Z |
|
| 2 |
| value |
0.03493 |
| scoring_system |
epss |
| scoring_elements |
0.87562 |
| published_at |
2026-04-04T12:55:00Z |
|
| 3 |
| value |
0.03493 |
| scoring_system |
epss |
| scoring_elements |
0.87565 |
| published_at |
2026-04-07T12:55:00Z |
|
| 4 |
| value |
0.03493 |
| scoring_system |
epss |
| scoring_elements |
0.87584 |
| published_at |
2026-04-08T12:55:00Z |
|
| 5 |
| value |
0.03493 |
| scoring_system |
epss |
| scoring_elements |
0.8759 |
| published_at |
2026-04-09T12:55:00Z |
|
| 6 |
| value |
0.03493 |
| scoring_system |
epss |
| scoring_elements |
0.87601 |
| published_at |
2026-04-11T12:55:00Z |
|
| 7 |
| value |
0.03493 |
| scoring_system |
epss |
| scoring_elements |
0.87597 |
| published_at |
2026-04-12T12:55:00Z |
|
| 8 |
| value |
0.03493 |
| scoring_system |
epss |
| scoring_elements |
0.87594 |
| published_at |
2026-04-13T12:55:00Z |
|
| 9 |
| value |
0.03493 |
| scoring_system |
epss |
| scoring_elements |
0.87609 |
| published_at |
2026-04-18T12:55:00Z |
|
|
| url |
https://api.first.org/data/v1/epss?cve=CVE-2023-22102 |
|
| 2 |
|
| 3 |
|
| 4 |
|
| 5 |
|
| 6 |
| reference_url |
https://www.oracle.com/security-alerts/cpuoct2023.html |
| reference_id |
|
| reference_type |
|
| scores |
| 0 |
| value |
8.3 |
| scoring_system |
cvssv3.1 |
| scoring_elements |
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H |
|
| 1 |
| value |
8.9 |
| scoring_system |
cvssv4 |
| scoring_elements |
CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H |
|
| 2 |
| value |
HIGH |
| scoring_system |
generic_textual |
| scoring_elements |
|
|
| 3 |
| value |
Track |
| scoring_system |
ssvc |
| scoring_elements |
SSVCv2/E:N/A:N/T:T/P:M/B:A/M:M/D:T/2025-03-06T15:27:01Z/ |
|
|
| url |
https://www.oracle.com/security-alerts/cpuoct2023.html |
|
| 7 |
|
| 8 |
|
| 9 |
|
|
| fixed_packages |
|
| aliases |
CVE-2023-22102, GHSA-m6vm-37g8-gqvh
|
| risk_score |
4.0 |
| exploitability |
0.5 |
| weighted_severity |
8.0 |
| resource_url |
http://public2.vulnerablecode.io/vulnerabilities/VCID-xap5-du1j-c7ed |
|
|
| Fixing_vulnerabilities |
|
| Risk_score | 4.0 |
| Resource_url | http://public2.vulnerablecode.io/packages/pkg:maven/mysql/mysql-connector-java@6.0.3 |