CVE-2017-3465: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Security: Privileges).

Security readout for executives and security teams

This is an older Oracle MySQL Server privilege flaw. A low-privileged attacker who can reach MySQL over the network could modify some data they should not be able to change. The cited CVSS score is 4.3, reflecting integrity impact without stated confidentiality or availability loss. Exposure is most likely where MySQL Server 5.7.17 or earlier remains deployed and reachable by users or services with low-privileged database credentials. Public internet exposure increases concern, but the source bundle does not state that internet exposure is required. Prioritize remediation for legacy MySQL systems that are still reachable by users, applications, or networks outside the database trust boundary. This is not rated critical, but unauthorized data modification can affect business records and operational integrity. Mitigation focus: Apply Oracle's April 2017 CPU guidance for affected MySQL Server deployments.; For Red Hat packaged MySQL, review and apply RHSA-2017:2886 as applicable.; Restrict MySQL network access to trusted hosts and application tiers..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.