CVE-2015-2575
mysql-connector-java - security update
EPSS 1.8%
Description
Unspecified vulnerability in the MySQL Connectors component in Oracle MySQL 5.1.34 and earlier allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Connector/J.
How to fix CVE-2015-2575
To remediate CVE-2015-2575, upgrade the affected package to a fixed version below.
- Debian/mysql-connector-java—upgrade to 5.1.39-1~deb7u1 or later
- Debian/mysql-connector-java—upgrade to 5.1.39-1~deb8u1 or later
- Maven/mysql:mysql-connector-java—upgrade to 5.1.35 or later
Is CVE-2015-2575 being exploited?
Low — EPSS is 1.8%, meaning exploitation activity has not been observed at scale.
Affected packages (3)
- from 0, < 5.1.39-1~deb7u1
- from 0, < 5.1.39-1~deb8u1
- from 0, < 5.1.35