Vulnerability in Oracle MySQL

CVE-2015-4766

Unspecified vulnerability in Oracle MySQL Server 5.6.25 and earlier allows local users to affect availability via unknown vectors related to Server : Security : Firewall.

Published 2015-10-21 · last modified 2026-06-17.

CVSS v2 metric

CVSS v2 base score 1.9 (Low). Vector: AV:L/AC:M/Au:N/C:N/I:N/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.004 (30.0th percentile), scored 2026-10-02.

Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 30th percentile — 30.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000

Affected products

Oracle MySQL

References

www.securitytracker.com/id/1033894 (vdb-entry)
www.ubuntu.com/usn/USN-2781-1 (vendor-advisory)
www.oracle.com/technetwork/topics/security/cpuoct2015-2367953.html (Vendor Advisory)
www.securityfocus.com/bid/77232 (vdb-entry)