CVE-2017-3306: Vulnerability in the MySQL Enterprise Monitor component of Oracle MySQL (subcomponent: Monitoring: Server).

Security readout for executives and security teams

This flaw affects Oracle MySQL Enterprise Monitor, not the MySQL database engine itself. A highly privileged network attacker could, with another person’s interaction, compromise monitored data, change or delete accessible data, and cause partial service disruption. The business concern is loss of monitoring integrity and exposure of sensitive operational information. Exposure is likely limited to organizations running MySQL Enterprise Monitor in the affected 3.1, 3.2, or 3.3 release lines, especially if the monitor is reachable over administrative networks or multiple protocols by privileged users. Treat this as high priority where MySQL Enterprise Monitor is deployed. It affects a management and monitoring plane, which can expose critical operational data and undermine trust in monitoring results. Mitigation focus: Inventory MySQL Enterprise Monitor deployments and identify affected versions.; Review Oracle April 2017 CPU guidance for the applicable vendor fix.; Restrict MySQL Enterprise Monitor access to trusted administrative networks..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.