CVE-2017-3523: Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J).

Security readout for executives and security teams

CVE-2017-3523 affects Oracle MySQL Connector/J, the Java driver many applications use to connect to MySQL. Oracle rates successful compromise as potentially allowing takeover of the connector, with high confidentiality, integrity, and availability impact. Exploitation is described as difficult and requiring low privileges plus network access. Exposure is most likely in Java applications or platforms bundling MySQL Connector/J 5.1.40 or earlier. Risk is higher where a low-privileged network user can interact with affected connector-driven services. The bundle does not identify specific downstream products. Treat this as a high-priority dependency remediation item, especially for business-critical Java services using MySQL. The vulnerability is older but high impact, so unresolved legacy deployments should be found and upgraded through normal change control. Mitigation focus: Inventory Java dependencies for MySQL Connector/J 5.1.40 or earlier.; Apply Oracle or Debian vendor updates where applicable.; Move affected applications to a vendor-supported fixed connector version..

Prepared

Jun 13, 2026, 05:18 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.