CVE-2015-2576

lowpriority · track · 8EPSS 0.004 · 38 %ileDEEUUS

grimoire priorityP3 · Track

Exploitable?

—

no known exploitation

Likely / severe?

0.44% (38th) EPSS

CVSS 2.1 · low

Is it mine?

55 products

Check your exposure

Who says so?

3 sources

cnnvd · enisa_euvd · cert_bund

EPSS · scored 2026-10-27

Unspecified vulnerability in the MySQL Utilities component in Oracle MySQL 1.5.1 and earlier, when running on Windows, allows local users to affect integrity via unknown vectors related to Installation.

cvss

Technical severity, 0–10. One row per scoring source.

2.1

010

base score 0–10 · higher = more severe · hover a vector to decode

v2.02.1lowAV:L/AC:L/Au:N/C:N/I:P/A:Nprimary · NVD / NIST USexploitability 3.9 · impact 2.9

v2.01.8lowAV:L/AC:L/Au:N/C:N/I:P/A:N/E:Usecondary · CVSS-BT (t0sche)

weaknesses

The CWE weakness classes this flaw belongs to.

No weakness (CWE) mapping recorded.

affected products (55)

Products and version ranges known to be affected.

Debian Linuxall versionscert_bundDEcpe:/o:debian:debian_linux:-
F5 BIG-IP < 14.0.0all versionscert_bundDEcpe:/a:f5:big-ip:14.0.0
F5 BIG-IP Access Policy Manager 10.1.0 - 10.2.4all versionscert_bundDEcpe:/a:f5:big-ip_access_policy_manager:10.2.4
F5 BIG-IP Access Policy Manager 11.5.0 - 11.6.0all versionscert_bundDEcpe:/a:f5:big-ip_access_policy_manager:11.6.0
F5 BIG-IP Access Policy Manager 12.0.0all versionscert_bundDEcpe:/a:f5:big-ip_access_policy_manager:12.0.0
F5 BIG-IP Analytics 11.0.0 - 11.6.0all versionscert_bundDEcpe:/a:f5:big-ip_analytics:11.6.0
F5 BIG-IP Analytics 12.0.0all versionscert_bundDEcpe:/a:f5:big-ip_analytics:12.0.0
F5 BIG-IP Application Security Manager 10.0.0 - 10.2.4all versionscert_bundDEcpe:/a:f5:big-ip_application_security_manager:10.2.4
F5 BIG-IP Application Security Manager 11.5.0 - 11.6.0all versionscert_bundDEcpe:/a:f5:big-ip_application_security_manager:11.6.0
F5 BIG-IP Application Security Manager 12.0.0all versionscert_bundDEcpe:/a:f5:big-ip_application_security_manager:12.0.0
F5 BIG-IP Edge Gateway 10.1.0 - 10.2.4all versionscert_bundDEcpe:/a:f5:big-ip_edge_gateway:10.2.4
F5 BIG-IP Edge Gateway 11.0.0 - 11.3.0all versionscert_bundDEcpe:/a:f5:big-ip_edge_gateway:11.3.0
F5 BIG-IP Global Traffic Manager 10.0.0 - 10.2.4all versionscert_bundDEcpe:/a:f5:big-ip_global_traffic_manager:10.2.4
F5 BIG-IP Global Traffic Manager 11.5.0 - 11.6.0all versionscert_bundDEcpe:/a:f5:big-ip_global_traffic_manager:11.6.0
F5 BIG-IP Link Controller 10.0.0 - 10.2.4all versionscert_bundDEcpe:/a:f5:big-ip_link_controller:10.2.4
F5 BIG-IP Link Controller 11.5.0 - 11.6.0all versionscert_bundDEcpe:/a:f5:big-ip_link_controller:11.6.0
F5 BIG-IP Link Controller 12.0.0all versionscert_bundDEcpe:/a:f5:big-ip_link_controller:12.0.0
F5 BIG-IP Local Traffic Manager 10.0.0 - 10.2.4all versionscert_bundDEcpe:/a:f5:big-ip_local_traffic_manager:10.2.4
F5 BIG-IP Local Traffic Manager 11.5.0 - 11.6.0all versionscert_bundDEcpe:/a:f5:big-ip_local_traffic_manager:11.6.0
F5 BIG-IP Local Traffic Manager 12.0.0all versionscert_bundDEcpe:/a:f5:big-ip_local_traffic_manager:12.0.0

showing 20 of 55

advisories (1)

Vendor and ecosystem advisories describing this.

WID-SEC-W-2023-2068Oracle MySQL: Mehrere SchwachstellenDeutsch2015-04-14csaf · cert_bundDE
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle MySQL ausnutzen, um dadurch die Integrität, Vertraulichkeit und Verfügbarkeit zu gefährden.

also known as (3)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd cert_bund NVD CVE.org

published 2015-04-16modified 2026-06-17

references (7)

External citations — patches, advisories, analysis.

http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html cnnvd
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.html enisa_euvd
http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.html enisa_euvd
http://www.securitytracker.com/id/1032121 enisa_euvd
http://lists.opensuse.org/opensuse-security-announce/2015-05/msg00026.htmlThird Party AdvisoryVDB Entrynvd
http://www.oracle.com/technetwork/topics/security/cpuapr2015-2365600.htmlPatchVendor Advisorynvd
http://www.securitytracker.com/id/1032121Third Party AdvisoryVDB Entrynvd

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan