CVE-2017-3455: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).

Security readout for executives and security teams

CVE-2017-3455 is a MySQL Server privilege-handling vulnerability. An attacker who already has low-privileged database access over the network could read some data they should not see and modify some data they should not change. The issue affects Oracle MySQL Server 5.7.17 and earlier. Exposure is most likely where MySQL Server 5.7.17 or earlier is still running and reachable by users or applications with low-privileged database accounts. Internet-exposed or broadly accessible database services increase concern, but valid low-level access is still required. Prioritize remediation for internet-facing, shared, or business-critical MySQL databases. This is not rated critical, but it can affect data confidentiality and integrity, making it important for systems storing customer, financial, operational, or regulated data. Mitigation focus: Upgrade MySQL Server beyond affected 5.7.17 and earlier releases using vendor guidance.; Apply Oracle April 2017 CPU or applicable downstream vendor security updates.; Restrict MySQL network access to trusted application hosts and administrative networks..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.