Known vulnerabilities in MySQL Enterprise Monitor - page 2

Vendor: Oracle
Software: MySQL Enterprise Monitor
Software CPE: cpe:2.3:a:oracle:mysql_enterprise_monitor:*:*:*:*:*:*:*:*
Website: https://www.oracle.com
Total vulnerabilities: 66
Public exploits: 19
Known exploited (KEV): 4
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MySQL Enterprise Monitor MySQL Enterprise Monitor is affected by 66 known vulnerabilities: 1 critical, 7 high, 39 medium, 19 low Critical High Medium Low

Vulnerabilities (66)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU71995 - Use After Free
CVE-2023-0215		 CWE-416 Medium
No
No
 - 07.02.2023 SB2023020742
SB2023020747
SB2023020748
and 209 more
#VU70666 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-45143		 CWE-94 Medium
No
No
 - 03.01.2023 SB2023010329
SB2023012516
SB2023012606
and 34 more
#VU68866 - Improper Authorization
CVE-2022-31692		 CWE-285 High
No
No
 - 01.11.2022 SB2022110101
SB2022121119
SB2023011162
and 28 more
#VU68859 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2022-42252		 CWE-444 Medium
No
No
 - 31.10.2022 SB2022103146
SB2022112324
SB2022112533
and 43 more
#VU65835 - Incorrect Regular Expression
CVE-2022-31129		 CWE-185 Medium
No
No
 - 27.07.2022 SB2022072729
SB2022072901
SB2022081048
and 102 more
#VU65503 - Improper input validation
CVE-2020-26237		 CWE-20 Medium
No
No
 - 20.07.2022 SB2022072055
SB2026041034
SB2026052079
#VU64922 - Missing Encryption of Sensitive Data
CVE-2022-2097		 CWE-311 Low
No
No
 - 05.07.2022 SB2022070509
SB2022070522
SB2022070531
and 112 more
#VU64627 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2022-34305		 CWE-79 Medium
Available
No
 - 23.06.2022 SB2022062338
SB2022071177
SB2022071801
and 26 more
#VU63085 - Improper input validation
CVE-2022-22971		 CWE-20 Medium
Available
No
 - 12.05.2022 SB2022051201
SB2022060620
SB2022062223
and 52 more
#VU62314 - Security Features
CVE-2022-22968		 CWE-254 Medium
Available
No
 8.0.30 14.04.2022 SB2022041405
SB2022042903
SB2022060324
and 31 more
#VU62084 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-31805		 CWE-94 High
Available
No
 - 12.04.2022 SB2022041218
SB2022061004
SB2022062415
and 10 more
#VU61756 - Improper Control of Generation of Code ('Code Injection')
CVE-2022-22965		 CWE-94 Critical
Available
Exploited
 - 31.03.2022 SB2022033109
SB2022040109
SB2022040110
and 78 more
#VU61391 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2022-0778		 CWE-835 Medium
Available
No
 - 15.03.2022 SB2022031520
SB2022031522
SB2022031611
and 238 more
#VU60091 - Improper input validation
CVE-2021-22119		 CWE-20 Medium
Available
No
 8.0.27 27.01.2022 SB2022012755
SB2022071955
SB2022072055
and 1 more
#VU60079 - Permissions, Privileges, and Access Controls
CVE-2022-23181		 CWE-264 Low
No
No
 - 27.01.2022 SB2022012708
SB2022030854
SB2022041951
and 25 more
#VU59691 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2022-23305		 CWE-89 Medium
No
No
 - 18.01.2022 SB2022011818
SB2022012640
SB2022012641
and 94 more
#VU59098 - Improper Control of Generation of Code ('Code Injection')
CVE-2021-44832		 CWE-94 Medium
No
No
 - 28.12.2021 SB2021122816
SB2021123002
SB2022010601
and 197 more
#VU58271 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-41184		 CWE-79 Medium
Available
No
 - 20.11.2021 SB2021112002
SB2022030804
SB2022041935
and 74 more
#VU57389 - Resource exhaustion
CVE-2021-42340		 CWE-400 Medium
No
No
 - 15.10.2021 SB2021101507
SB2021110507
SB2021111711
and 28 more
#VU50820 - Permissions, Privileges, and Access Controls
CVE-2021-22112		 CWE-264 Medium
No
No
 8.0.27 22.02.2021 SB2021022207
SB2021022216
SB2021042314
and 8 more


Showing elements 21 - 40 out of 66