Medium severity · published Oct 25, 2016
CVE-2016-5598
Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and earlier in Oracle MySQL allows remote attackers to affect confidentiality, integrity,…
5.6
CVSS
2.2%
EPSS
No
On KEV
Description
Unspecified vulnerability in the MySQL Connector component 2.1.3 and earlier and 2.0.4 and earlier in Oracle MySQL allows remote attackers to affect confidentiality, integrity, and availability via vectors related to Connector/Python.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 83% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
MC
Mysql Connector/python · Oracle
2.0.0 through 2.0.4; 2.1.0 through 2.1.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2016-5598
CVE.org
https://www.cve.org/CVERecord?id=CVE-2016-5598
Patch
http://www.oracle.com/technetwork/security-advisory/cpuoct2016-2881722.html
Third Party Advisory
http://www.securityfocus.com/bid/93653
Third Party Advisory
http://www.securitytracker.com/id/1037050
More from Mysql Connector/python
7.5
CVE-2024-21272
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python)
7.5
CVE-2024-21090
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python)
6.4
CVE-2025-21548
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python)
6.3
CVE-2024-21170
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python)
4.8
CVE-2025-30714
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python)