CVE-2015-2575
Improper Access Control in MySQL Connectors Java
CVE-2015-2575 is a medium vulnerability (CVSS 4.9) in Mysql, published April 16, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.56%, the 89th percentile. Fixed in mysql:mysql-connector-java 5.1.35.
Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.
Exploit likelihood
What each source reports
NVD Score used
Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.
- Record
CVE-2015-2575- CVSS 2.0
- 4.9 Medium
AV:N/AC:M/Au:S/C:P/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.
- Record
CVE-2015-2575- Updated
- 2026-11-02
EUVDEUVD-2022-3934 No score
Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.
- Record
EUVD-2022-3934- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-gc43-g62c-99g2 No score
Improper Access Control in MySQL Connectors Java
Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.
- Record
GHSA-gc43-g62c-99g2- Weakness
- CWE-284
- Updated
- 2026-11-02
OSVGHSA-gc43-g62c-99g2 No score
Improper Access Control in MySQL Connectors Java
Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.
- Record
GHSA-gc43-g62c-99g2- Weakness
- CWE-284
- Updated
- 2026-11-02
OSVMGASA-2015-0255 No score
Updated mysql-connector-java package fixes security vulnerability
Difficult to exploit vulnerability allows successful authenticated network attacks via multiple protocols. Successful attack of this vulnerability can result in unauthorized update, insert or delete access to some MySQL Connectors accessible data as well as read access to a subset of MySQL Connectors accessible data (CVE-2015-2575).
The mysql-connector-java package has been updated to version 5.1.35 to fix this issue and several other bugs
- Record
MGASA-2015-0255- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:10286-1 No score
mysql-connector-java-5.1.35-2.3 on GA media
These are all security issues fixed in the mysql-connector-java-5.1.35-2.3 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:10286-1- Updated
- 2026-11-02
OSVSUSE-SU-2016:2259-1 No score
Security update for mysql-connector-java
mysql-connector-java was updated to 5.1.35, fixing multiple bugs and a security issues.
- CVE-2015-2575: Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J. (bnc#927981)
Please see http://dev.mysql.com/doc/relnotes/connector-j/en/news-5-1.html
- Record
SUSE-SU-2016:2259-1- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-2575 No score
Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.
- Record
UBUNTU-CVE-2015-2575- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
mysql:mysql-connector-javaMaven |
before 5.1.35 | 5.1.35 |
mysql-connector-javaDebian:7 |
before 5.1.39-1~deb7u1, plus listed versions 5.1.16-25.1.25-15.1.26-15.1.27-15.1.28-1 Show 6 moreShow less5.1.29-15.1.30-15.1.31-15.1.32-15.1.37-15.1.38-1 |
5.1.39-1~deb7u1 |
mysql-connector-javaDebian:8 |
before 5.1.39-1~deb8u1, plus listed versions 5.1.32-15.1.37-15.1.38-15.1.39-1~deb7u1 |
5.1.39-1~deb8u1 |
mysql:mysql-connector-javaMaven |
before 5.1.35, plus listed versions 2.0.143.0.103.0.83.1.113.1.12 Show 41 moreShow less3.1.133.1.145.0.25.0.35.0.45.0.55.0.75.0.85.1.15.1.105.1.115.1.125.1.135.1.145.1.155.1.165.1.175.1.185.1.195.1.25.1.205.1.215.1.225.1.235.1.245.1.255.1.265.1.275.1.285.1.295.1.35.1.305.1.315.1.325.1.335.1.345.1.45.1.55.1.65.1.85.1.9 |
5.1.35 |
mysql-connector-javaMageia:4 |
before 5.1.35-1.mga4 | 5.1.35-1.mga4 |
mysql-connector-javaSUSE:Linux Enterprise Software Development Kit 12 SP1 |
before 5.1.35-3.1 | 5.1.35-3.1 |
mysql-connector-javaUbuntu:14.04:LTS |
All versions, plus listed versions 5.1.25-15.1.26-15.1.27-15.1.28-1 |
None known |
mysql-connector-javaopenSUSE:Tumbleweed |
before 5.1.35-2.3 | 5.1.35-2.3 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
lists.opensuse.org/opensuse-updates/2015-05/msg00089.html
security.netapp.com/advisory/ntap-20150417-0003
debian.org/security/2016/dsa-3621
securityfocus.com/bid/74075
securitytracker.com/id/1032121
oracle.com/technetwork/topics/security/cpuapr2015-2365600.html
Show 11 moreShow less
nvd.nist.gov/vuln/detail/CVE-2015-2575
github.com/advisories/GHSA-gc43-g62c-99g2
advisories.mageia.org/MGASA-2015-0255.html
bugs.mageia.org/show_bug.cgi?id=16070
dev.mysql.com/doc/relnotes/connector-j/en/news-5-1.html
suse.com/support/update/announcement/2016/suse-su-20162259-1
bugzilla.suse.com/927981
ubuntu.com/security/CVE-2015-2575
cve.org/CVERecord?id=CVE-2015-2575