Mysql Workbench
Vendor:
First CVE: Apr 24, 2017 · Active for 9 years
42
Total CVEs
More Total CVEs than 97% of tracked products
7.0
Avg CVEs / Year
Higher CVE frequency than 92% of tracked products
7.1
Avg CVSS
Higher Avg CVSS than 43% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Mysql Workbench over time
Volume of CVEsAvg CVSS Base Score
First CVE
Apr 24, 2017
9 years ago
Most Recent CVE
May 3, 2022
1,544 days ago
CVE Severity & Scoring
Mysql Workbench42 CVEs
31%
55%
10%
All CVEs352,708 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local3 (7.1%)
Network39 (92.9%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low33 (78.6%)
High9 (21.4%)
Unknown0 (0.0%)
User Interaction
None37 (88.1%)
Unknown0 (0.0%)
Required5 (11.9%)
Privileges Required
Low4 (9.5%)
High0 (0.0%)
None38 (90.5%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (42 CVEs).
42 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2018-10933CRITICAL A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4. A malicious client could create channels without first performing authentication, r | Oct 17, 2018 | 9.1 | 90 | NO | YES |
CVE-2022-1292HIGH The c_rehash script does not properly sanitise shell metacharacters to prevent command injection. This script is distributed by some operating systems in a manner where it is autom | May 3, 2022 | 7.3 | 68 | NO | NO |
CVE-2021-3449MEDIUM An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renegotiation ClientHello omits the signature_algorithms | Mar 25, 2021 | 5.9 | 57 | NO | NO |
CVE-2021-3712HIGH ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string data and a field holding the buffer length. This cont | Aug 24, 2021 | 7.4 | 53 | NO | NO |
CVE-2020-1967HIGH Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL pointer dereference as a result of incorrect hand | Apr 21, 2020 | 7.5 | 51 | NO | NO |
CVE-2022-21824HIGH Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing | Feb 24, 2022 | 8.2 | 39 | NO | NO |
CVE-2021-3450HIGH The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not set by default. Starting from OpenSSL version 1.1. | Mar 25, 2021 | 7.4 | 34 | NO | NO |
CVE-2019-19646CRITICAL pragma.c in SQLite through 3.30.1 mishandles NOT NULL in an integrity_check PRAGMA command in certain cases of generated columns. | Dec 9, 2019 | 9.8 | 32 | NO | NO |
CVE-2021-3517HIGH There is a flaw in the xml entity encoding functionality of libxml2 in versions before 2.9.11. An attacker who is able to supply a crafted file to be processed by an application li | May 19, 2021 | 8.6 | 31 | NO | NO |
CVE-2019-19317CRITICAL lookupName in resolve.c in SQLite 3.30.1 omits bits from the colUsed bitmask in the case of a generated column, which allows attackers to cause a denial of service or possibly have | Dec 5, 2019 | 9.8 | 31 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (42 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
2.4% of CVEs· 96th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
1 CVE
2.4% of CVEs· 88th percentile
Social Chatter
Signals from CVEs in this product scope (42 CVEs).
Media Mentions
Signals from CVEs in this product scope (42 CVEs).
Top CNAs Publishing CVEs For Mysql Workbench
Top CWEs
Versions
No cataloged versions.