Lucene search
Veracode Vulnerability DatabaseVERACODE:3966HistoryApr 25, 2017 - 3:05 a.m.
Improper Automatic Deserialization
2017-04-2503:05:38
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
5
0.001 Low
EPSS
Percentile
50.9%
mysql-connector-java is vulnerable to deserialization attacks. The vulnerability exists as there is an improper automatic deserialization issue in the getNativeConvertToString function of ResultSetImpl.
| CPE | Name | Operator | Version |
|---|---|---|---|
| mysql-connector-java | le | 5.1.40 |
References
Related
redhatcve
redhatcve
CVE-2017-3523
2017-04-24 08:48:14
ubuntucve
ubuntucve
CVE-2017-3523
2017-04-24 00:00:00
nessus
nessus
Debian DSA-3840-1 : mysql-connector-java - security update
2017-05-03 00:00:00
EulerOS 2.0 SP5 : mysql-connector-java (EulerOS-SA-2021-1215)
2021-02-04 00:00:00
EulerOS 2.0 SP3 : mysql-connector-java (EulerOS-SA-2021-1099)
2021-01-20 00:00:00
openvas
openvas
debiancve
debiancve
CVE-2017-3523
2017-04-24 19:59:00
osv
osv
mysql-connector-java - security update
2017-05-02 00:00:00
Improper Access Control in MySQL Connectors Java
2022-05-13 01:45:34
mysql-connector-java - security update
2017-05-16 00:00:00
prion
prion
Design/Logic Flaw
2017-04-24 19:59:00
ibm
ibm
github
github
Improper Access Control in MySQL Connectors Java
2022-05-13 01:45:34
cvelist
cvelist
CVE-2017-3523
2017-04-24 19:00:00
nvd
nvd
CVE-2017-3523
2017-04-24 19:59:03
cve
cve
CVE-2017-3523
2017-04-24 19:59:03
debian
debian
[SECURITY] [DSA 3840-1] mysql-connector-java
2017-05-02 21:05:29
[SECURITY] [DLA 945-1] mysql-connector-java security update
2017-05-16 22:52:19
mageia
mageia
Updated mysql-connector-java packages fix security vulnerabilities
2017-10-24 08:50:58
oracle
oracle
Oracle Critical Patch Update Advisory - April 2017
2017-04-18 00:00:00