{"id":"CVE-2015-2575","aliases":["DEBIAN-CVE-2015-2575","DLA-526-1","DSA-3621-1","EUVD-2022-3934","GHSA-gc43-g62c-99g2","MGASA-2015-0255","SUSE-SU-2016:2259-1","UBUNTU-CVE-2015-2575","openSUSE-SU-2024:10286-1"],"status":"published","title":"Improper Access Control in MySQL Connectors Java","description":"Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.","severity":{"version":"2.0","score":4.9,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.03564,"percentile":0.89426,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284"],"published":"2015-04-16T16:00:00Z","modified":"2026-06-17T00:24:19Z","fixes":[{"ecosystem":"Maven","package":"mysql:mysql-connector-java","fixed_in":["5.1.35"],"sources":["ghsa","osv"]},{"ecosystem":"Debian:7","package":"mysql-connector-java","fixed_in":["5.1.39-1~deb7u1"],"sources":["osv"]},{"ecosystem":"Debian:8","package":"mysql-connector-java","fixed_in":["5.1.39-1~deb8u1"],"sources":["osv"]},{"ecosystem":"Mageia:4","package":"mysql-connector-java","fixed_in":["5.1.35-1.mga4"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"mysql-connector-java","fixed_in":["5.1.35-3.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Tumbleweed","package":"mysql-connector-java","fixed_in":["5.1.35-2.3"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"mysql:mysql-connector-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.35"}]}]},{"source":"osv","ecosystem":"Debian:7","package":"mysql-connector-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.39-1~deb7u1"}]}],"versions":["5.1.16-2","5.1.25-1","5.1.26-1","5.1.27-1","5.1.28-1","5.1.29-1","5.1.30-1","5.1.31-1","5.1.32-1","5.1.37-1","5.1.38-1"]},{"source":"osv","ecosystem":"Debian:8","package":"mysql-connector-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.39-1~deb8u1"}]}],"versions":["5.1.32-1","5.1.37-1","5.1.38-1","5.1.39-1~deb7u1"]},{"source":"osv","ecosystem":"Maven","package":"mysql:mysql-connector-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.35"}]}],"versions":["2.0.14","3.0.10","3.0.8","3.1.11","3.1.12","3.1.13","3.1.14","5.0.2","5.0.3","5.0.4","5.0.5","5.0.7","5.0.8","5.1.1","5.1.10","5.1.11","5.1.12","5.1.13","5.1.14","5.1.15","5.1.16","5.1.17","5.1.18","5.1.19","5.1.2","5.1.20","5.1.21","5.1.22","5.1.23","5.1.24","5.1.25","5.1.26","5.1.27","5.1.28","5.1.29","5.1.3","5.1.30","5.1.31","5.1.32","5.1.33","5.1.34","5.1.4","5.1.5","5.1.6","5.1.8","5.1.9"]},{"source":"osv","ecosystem":"Mageia:4","package":"mysql-connector-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.35-1.mga4"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP1","package":"mysql-connector-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.35-3.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"mysql-connector-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.1.25-1","5.1.26-1","5.1.27-1","5.1.28-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"mysql-connector-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"5.1.35-2.3"}]}]}],"products":[{"vendor":"debian","product":"debian_linux"},{"vendor":"mysql","product":"mysql"},{"vendor":"suse","product":"linux_enterprise_desktop"},{"vendor":"suse","product":"linux_enterprise_server"},{"vendor":"suse","product":"linux_enterprise_software_development_kit"}],"references":[{"url":"http://lists.opensuse.org/opensuse-updates/2015-05/msg00089.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Broken Link","web"]},{"url":"https://security.netapp.com/advisory/ntap-20150417-0003/","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://www.debian.org/security/2016/dsa-3621","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","web"]},{"url":"http://www.securityfocus.com/bid/74075","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1032121","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","web","report"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","Third Party Advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-2575","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-gc43-g62c-99g2"},{"url":"https://security.netapp.com/advisory/ntap-20150417-0003","tags":["web"]},{"url":"https://advisories.mageia.org/MGASA-2015-0255.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=16070","tags":["report"]},{"url":"http://dev.mysql.com/doc/relnotes/connector-j/en/news-5-1.html","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2016/suse-su-20162259-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/927981","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2015-2575","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2015-2575","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-2575","tags":["report"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2015-2575","description":"Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.","status":"published","published":"2015-04-16T16:00:00Z","modified":"2024-08-06T05:17:27.448Z","updated_at":"2026-11-02T14:35:41.621934Z"}],"euvd":[{"id":"EUVD-2022-3934","description":"Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.","status":"published","published":"2015-04-16T16:00:00Z","modified":"2024-08-06T05:17:27Z","updated_at":"2026-11-03T02:22:11.095833Z"}],"ghsa":[{"id":"GHSA-gc43-g62c-99g2","title":"Improper Access Control in MySQL Connectors Java","description":"Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.","status":"published","published":"2022-05-17T00:25:07Z","modified":"2023-01-27T05:02:21Z","cwes":["CWE-284"],"updated_at":"2026-11-02T14:36:17.742171Z"}],"nvd":[{"id":"CVE-2015-2575","description":"Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.","status":"published","published":"2015-04-16T17:00:07.253Z","modified":"2026-06-17T00:24:19.567Z","cvss":[{"version":"2.0","score":4.9,"vector":"AV:N/AC:M/Au:S/C:P/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:04.095849Z"}],"osv":[{"id":"DLA-526-1","title":"mysql-connector-java - security update","status":"published","published":"2016-06-25T00:00:00Z","modified":"2026-03-09T02:09:46.594187Z","updated_at":"2026-11-02T15:46:13.207219Z"},{"id":"DSA-3621-1","title":"mysql-connector-java - security update","status":"published","published":"2016-07-18T00:00:00Z","modified":"2026-03-09T02:10:01.965148Z","updated_at":"2026-11-02T15:46:16.199525Z"},{"id":"GHSA-gc43-g62c-99g2","title":"Improper Access Control in MySQL Connectors Java","description":"Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.","status":"published","published":"2022-05-17T00:25:07Z","modified":"2024-12-05T05:42:05.017267Z","cwes":["CWE-284"],"updated_at":"2026-11-02T15:46:47.472172Z"},{"id":"MGASA-2015-0255","title":"Updated mysql-connector-java package fixes security vulnerability","description":"Difficult to exploit vulnerability allows successful authenticated network\nattacks via multiple protocols. Successful attack of this vulnerability\ncan result in unauthorized update, insert or delete access to some MySQL\nConnectors accessible data as well as read access to a subset of MySQL\nConnectors accessible data (CVE-2015-2575).\n\nThe mysql-connector-java package has been updated to version 5.1.35 to fix\nthis issue and several other bugs\n","status":"published","published":"2015-07-05T17:22:03Z","modified":"2026-04-16T06:25:19.8253412Z","updated_at":"2026-11-02T15:49:39.792687Z"},{"id":"openSUSE-SU-2024:10286-1","title":"mysql-connector-java-5.1.35-2.3 on GA media","description":"These are all security issues fixed in the mysql-connector-java-5.1.35-2.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:55:35.155971Z","updated_at":"2026-11-02T16:58:33.135986Z"},{"id":"SUSE-SU-2016:2259-1","title":"Security update for mysql-connector-java","description":"\nmysql-connector-java was updated to 5.1.35, fixing multiple bugs and a security issues.\n\n- CVE-2015-2575: Unspecified vulnerability in the MySQL Connectors\n  component in Oracle MySQL 5.1.34 and earlier allows remote authenticated\n  users to affect confidentiality and integrity via unknown vectors related\n  to Connector/J. (bnc#927981)\n\nPlease see http://dev.mysql.com/doc/relnotes/connector-j/en/news-5-1.html\n","status":"published","published":"2016-09-07T11:48:56Z","modified":"2026-02-04T03:01:27.277134Z","updated_at":"2026-11-02T15:53:43.438985Z"},{"id":"UBUNTU-CVE-2015-2575","description":"Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.","status":"published","published":"2015-04-16T17:00:00Z","modified":"2025-10-24T04:45:20Z","updated_at":"2026-11-02T15:54:10.045446Z"}]}}