Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2020-2934

20
FAUCET Score

CVE-2020-2934 is a medium-severity vulnerability affecting Oracle MySQL Connectors, specifically versions 8.0.19 and prior, and 5.1.48 and prior, with Debian and Fedora Project also listed as affected. It allows an unauthenticated attacker with network access to achieve partial data modification, limited data disclosure, and a partial denial of service. Exploitation is difficult and requires user interaction, but the impact includes unauthorized update, insert, delete, and read access to some accessible data. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage, indicating low current attention.

Impacted Technologies

VendorProductVersion(s)CPE
<= 5.1.48CPE matchmatch criteria
cpe:2.3:a:oracle:mysql_connector\/j:*:*:*:*:*:*:*:*
>= 8.0.0, <= 8.0.19CPE matchmatch criteria
cpe:2.3:a:oracle:mysql_connector\/j:*:*:*:*:*:*:*:*
32CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:32:*:*:*:*:*:*:*
33CPE matchmatch criteria
cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:*
8.0CPE matchmatch criteria
cpe:2.3:o:debian:debian_linux:8.0:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.0

5.0MEDIUM

CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L

Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
LOW
Exploitability Score
1.6
Impact Score
3.4
CvssVersion
3.0

Exploit Intelligence

EPSS Score
3.20%
Probability of exploitation in next 30 days
EPSS Percentile
86.8%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0320 is in the 91st percentile among its peer group of 707 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.2 Bluesky, 0.0 Mastodon, and 0.2 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (5)

oraclepatch availablevia nvd_reference
View patch
redhatpatch availablevia redhat_api
Product: Red Hat Fuse 7.10Fixed in: mysql-connector-java
View patch
redhatpatch availablevia redhat_api
Product: RHDM 7.9.0Fixed in: mysql-connector-java
View patch
redhatpatch availablevia redhat_api
Product: RHPAM 7.9.0Fixed in: mysql-connector-java
View patch
redhatend of lifevia redhat_api
Product: Red Hat Enterprise Linux 7Fixed in: mysql-connector-java

Vendor Advisories (1)

redhatCVE-2020-2934Low

mysql-connector-java: allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors which could result in unauthorized update, insert or delete

Apr 15, 2020

References

lists.debian.org / debian-lts-announce/2020/06/msg00015.html
Mailing ListThird Party Advisory
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/4QDR2WOUETBT76WAO5NNCCXSAM3AGG3D
lists.fedoraproject.org / archives/list/package-announce%40lists.fedoraproject.org/message/MDKQVPFT4Z4SFPBH6YNFMJOXKS2YYKHA
security.gentoo.org / glsa/202105-27
Third Party Advisory
debian.org / security/2020/dsa-4703
Third Party Advisory
oracle.com / security-alerts/cpuapr2020.html
Vendor Advisory
oracle.com / security-alerts/cpujan2022.html
PatchThird Party Advisory