VRT 391,810 CVEs tracked · 15,472 in RASP scope · data as of 32 minutes ago

CVE-2023-22032

4.9 Medium Out of RASP scope

Description

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.34 and prior and 8.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Exploitation Status

No public exploit

Nothing published shows this CVE being exploited, which is not the same as ruling it out. nothing published in 2 years.

CVSS E:U

  • CISA KEV not listed
  • CISA Vulnrichment exploitation: none
  • Indexed PoC none indexed
  • EPSS 0.94% chance in 30 days

Waratek Defense Posture

Out of RASP scope

A genuine Java vulnerability in a supported product that the agent cannot reach: a coverage gap, not an out-of-domain finding.

  • Protection none
  • Action not-needed none
  • Review human manual-review
  • Record active
Decided by manual classification : Manual classification of this CVE in the legacy dataset
Finding Manual classification marked OUT-OF-SCOPE but CVE matches known CPE products

CVSS

4.9 MEDIUM v3.1 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H 1 metric

VRT selects the newest version's highest entry and publishes it as cvssScore, newest rather than largest because scores are not comparable across versions, and highest rather than first because the first entry is frequently a CNA placeholder scoring 0.0 over NVD's own analysis.

VersionScoreBandVectorAssignerType
CVSS 3.1 4.9 MEDIUM CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H secalert_us@oracle.com Secondary published

Affected Software & Releases

🏛️ Oracle CPU Advisories & Products

AdvisoryTypeQuarterProducts Oracle named in risk matrix
Oracle Critical Patch Update October 2023 ↗ CPU 2023-Q4 Oracle MySQL / Server: Optimizer (8.0.34 and prior, 8.1.0)

Indexed Oracle Components & Versions

FamilyComponentOracle's version cell (verbatim)Indexed as
Oracle MySQL Server: Optimizer 8.0.34 and prior, 8.1.0 8.1.0

🖥️ Product CPEs & Version Ranges

2 product(s) over 3 version claims (uncapped)
SourceVendorProductSchemeAffected Versions
nvd netapp oncommand insight generic any version
nvd oracle mysql generic ≥ 8.0 and ≤ 8.0.34 · 8.1.0

References

URLTags
https://security.netapp.com/advisory/ntap-20231027-0009/ Third Party Advisory
https://www.oracle.com/security-alerts/cpuoct2023.html Patch, Vendor Advisory

Timeline

Published 2023-10-17 Last modified 2026-06-17
Published2023-10-17By the CVE Program.
NVD record modified2026-06-17NVD's own last-modified date for this record.