{"id":"CVE-2016-5598","aliases":["EUVD-2016-6542","GHSA-j5cf-mr37-wmwc","UBUNTU-CVE-2016-5598","openSUSE-SU-2024:10543-1","openSUSE-SU-2024:11240-1","openSUSE-SU-2024:14149-1","openSUSE-SU-2026:12019-1"],"status":"published","title":"Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and...","description":"Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and earlier in Oracle MySQL allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Connector/Python.","severity":{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02207,"percentile":0.82693,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-284"],"published":"2016-10-25T14:00:00Z","modified":"2026-10-24T10:30:19Z","fixes":[{"ecosystem":"openSUSE:Tumbleweed","package":"python-mysql-connector-python","fixed_in":["2.1.4-1.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"mysql-connector-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.0.4-1"]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-mysql-connector-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.1.4-1.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-mysql-connector-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"8.2.0-1.5"}]}],"bundled":2},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"python-mysql-connector-python","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"9.7.0-1.2"}]}],"bundled":3}],"products":[{"vendor":"oracle","product":"mysql_connector\\/python"}],"references":[{"url":"http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html","tags":["x_refsource_CONFIRM","x_transferred","Patch","Vendor Advisory","fix"]},{"url":"http://www.securityfocus.com/bid/93653","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"http://www.securitytracker.com/id/1037050","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2016-5598"},{"url":"https://github.com/advisories/GHSA-j5cf-mr37-wmwc"},{"url":"https://ubuntu.com/security/CVE-2016-5598","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2016-5598","tags":["report"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2016-5598","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2019-2435","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2024-21272","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2016-5598","description":"Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and earlier in Oracle MySQL allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Connector/Python.","status":"published","published":"2016-10-25T14:00:00Z","modified":"2024-10-10T18:20:27.949Z","updated_at":"2026-11-02T14:33:31.117878Z"}],"euvd":[{"id":"EUVD-2016-6542","description":"Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and earlier in Oracle MySQL allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Connector/Python.","status":"published","published":"2016-10-25T14:00:00Z","modified":"2024-10-10T18:20:27Z","updated_at":"2026-11-03T00:27:40.508744Z"}],"ghsa":[{"id":"GHSA-j5cf-mr37-wmwc","title":"Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and...","description":"Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and earlier in Oracle MySQL allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Connector/Python.","status":"published","published":"2022-05-14T03:27:49Z","modified":"2023-02-02T05:07:58Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:52:38.092316Z"}],"nvd":[{"id":"CVE-2016-5598","description":"Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and earlier in Oracle MySQL allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Connector/Python.","status":"published","published":"2016-10-25T14:31:09.75Z","modified":"2026-06-17T00:49:43.56Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-284"],"updated_at":"2026-11-02T14:03:32.086916Z"}],"osv":[{"id":"CVE-2016-5598","description":"Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and earlier in Oracle MySQL allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Connector/Python.","status":"published","published":"2016-10-25T14:31:09.75Z","modified":"2026-10-24T10:30:19.162617891Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:44:02.776224Z"},{"id":"UBUNTU-CVE-2016-5598","description":"Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and earlier in Oracle MySQL allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Connector/Python.","status":"published","published":"2016-10-25T14:31:00Z","modified":"2025-10-24T04:45:49Z","cvss":[{"version":"3.0","score":5.6,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-02T15:54:12.642042Z"},{"id":"openSUSE-SU-2024:10543-1","title":"python-mysql-connector-python-2.1.4-1.1 on GA media","description":"These are all security issues fixed in the python-mysql-connector-python-2.1.4-1.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T03:10:12.652586Z","updated_at":"2026-11-02T16:58:34.487567Z"},{"id":"openSUSE-SU-2024:11240-1","title":"python36-mysql-connector-python-8.0.19-2.9 on GA media","description":"These are all security issues fixed in the python36-mysql-connector-python-8.0.19-2.9 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T02:22:22.306258Z","updated_at":"2026-11-02T16:58:34.894275Z"},{"id":"openSUSE-SU-2024:14149-1","title":"python310-mysql-connector-python-8.2.0-1.5 on GA media","description":"These are all security issues fixed in the python310-mysql-connector-python-8.2.0-1.5 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-07-12T00:00:00Z","modified":"2026-02-04T03:09:23.817007Z","updated_at":"2026-11-02T16:58:36.662953Z"},{"id":"openSUSE-SU-2026:12019-1","title":"python313-mysql-connector-python-9.7.0-1.2 on GA media","description":"These are all security issues fixed in the python313-mysql-connector-python-9.7.0-1.2 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2026-10-04T00:00:00Z","modified":"2026-10-05T10:15:34.999704605Z","updated_at":"2026-11-02T16:58:40.245664Z"}]}}