CVE-2020-2572

LowCVSS 2.7/10Last modified Jun 17, 2026

Description

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Audit Plugin). Supported versions that are affected are 5.7.28 and prior and 8.0.18 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).

Metrics

CVSS 3.1 2.7/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N

Affected software

No affected versions have been published.

Timeline

Published: Jan 15, 2020
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-257207.5A vulnerability was found in Samba where a delegated administrator with permission to create objects in Active Directory can write to all at CVE-2020-257218.8Kerberos acceptors need easy access to stable AD identifiers (eg objectSid). Samba as an AD DC now provides a way for Linux applications to CVE-2020-257228.8Multiple flaws were found in the way samba AD DC implemented access and conformance checking of stored data. An attacker could use this flaw CVE-2020-257233.2A reachable assertion issue was found in the USB EHCI emulation code of QEMU. It could occur while processing USB requests due to missing ha CVE-2020-257244.3A flaw was found in RESTEasy, where an incorrect response to an HTTP request is provided. This flaw allows an attacker to gain access to pri CVE-2020-257255.5In Xpdf 4.02, SplashOutputDev::endType3Char(GfxState *state) SplashOutputDev.cc:3079 is trying to use the freed `t3GlyphStack->cache`, which CVE-2020-257277.5The Reset Password add-on before 1.2.0 for Alfresco suffers from CMIS-SQL Injection, which allows a malicious user to inject a query within CVE-2020-257288.8The Reset Password add-on before 1.2.0 for Alfresco has a broken algorithm (involving an increment) that allows a malicious user to change a CVE-2020-257296.1ZoneMinder before 1.34.21 has XSS via the connkey parameter to download.php or export.php.CVE-2020-25735.9Vulnerability in the MySQL Client product of Oracle MySQL (component: C API). Supported versions that are affected are 5.7.28 and prior and CVE-2020-257308.2Cross Site Scripting (XSS) vulnerability in ZoneMinder before version 1.34.21, allows remote attackers execute arbitrary code, escalate priv CVE-2020-257337.5webTareas through 2.1 allows upload of the dangerous .exe and .shtml file types.