CVE-2015-4737

LOW 3.5CVE-2015-4737 · Published 16/07/2015 · updated 17/06/2026

In short

CVE-2015-4737 is a LOW (CVSS 3.5) vulnerability affecting mysql (oracle).
Chance of exploitation in the next 30 days (EPSS): 3.6%, higher than 89.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mysql oracle	`≥ 5.5.0, ≤ 5.5.43≥ 5.6.0, ≤ 5.6.24`	No fix yet

Description

Unspecified vulnerability in Oracle MySQL Server 5.5.43 and earlier, and 5.6.23 and earlier, allows remote authenticated users to affect confidentiality via unknown vectors related to Server : Pluggable Auth.

References

lists.opensuse.org/opensuse-updates/2015-09/msg00042.html · Mailing List
rhn.redhat.com/errata/RHSA-2015-1628.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2015-1629.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2015-1630.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2015-1646.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2015-1647.html · Third Party Advisory
rhn.redhat.com/errata/RHSA-2015-1665.html · Third Party Advisory
debian.org/security/2015/dsa-3308 · Third Party Advisory
oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html · Third Party Advisory
oracle.com/technetwork/topics/security/cpujul2015-2367936.html · Patch
securityfocus.com/bid/75802 · Third Party Advisory
securitytracker.com/id/1032911 · Third Party Advisory
ubuntu.com/usn/USN-2674-1 · Third Party Advisory
security.gentoo.org/glsa/201610-06 · Third Party Advisory

More vulnerabilities in mysql

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free