Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

Buy Us a Coffee

CVE-2020-2934

Quick assessment

Affected

Oracle Corporation WebLogic Server

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Oracle MySQL是美国甲骨文（Oracle）公司的一套开源的关系数据库管理系统。 Oracle MySQL中的MySQL Connectors 5.1.48之前版本和8.0.19及之前版本的Connector/J组件存在安全漏洞。攻击者可利用该漏洞未授权读取、更新、插入或删除数据，造成拒绝服务，影响数据的可用性、保密性和完整性。

AI Predicted 5.0 Difficulty: Hard EPSS 3.20% · P87 Updated Feb 24, 2026

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application

Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2020-2934

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!

View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title

N/A

Source: CVE Program / CVE List V5

Vulnerability Description

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.19 and prior and 5.1.48 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data as well as unauthorized read access to a subset of MySQL Connectors accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.0 Base Score 5.0 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:L).

Source: CVE Program / CVE List V5

CVSS Information

N/A

Source: CVE Program / CVE List V5

Vulnerability Type

N/A

Source: CVE Program / CVE List V5

Vulnerability Title

Oracle MySQL 安全漏洞

Source: CNNVD (China National Vulnerability Database)

Vulnerability Description

Source: CNNVD (China National Vulnerability Database)

CVSS Information

N/A

Source: CNNVD (China National Vulnerability Database)

Vulnerability Type

N/A

Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor	Product	Affected Versions	CPE	Subscribe
Oracle Corporation	WebLogic Server	12.1.3.0.0	-

II. Public POCs for CVE-2020-2934

#	POC Description	Source Link	Shenlong Link

AI-Generated POC Premium

No public POC found.

III. Intelligence Information for CVE-2020-2934

请登录查看更多情报信息。

Vendor Advisories for CVE-2020-2934 (4)

https://www.oracle.com/security-alerts/cpujan2022.html x_refsource_MISC
https://www.oracle.com/security-alerts/cpuapr2020.html x_refsource_MISC
https://www.debian.org/security/2020/dsa-4703 vendor-advisory x_refsource_DEBIAN
https://security.gentoo.org/glsa/202105-27 vendor-advisory x_refsource_GENTOO

Mailing List Discussions for CVE-2020-2934 (3)

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4QDR2WOUETBT76WAO5NNCCXSAM3AGG3D/ vendor-advisory x_refsource_FEDORA
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MDKQVPFT4Z4SFPBH6YNFMJOXKS2YYKHA/ vendor-advisory x_refsource_FEDORA
https://lists.debian.org/debian-lts-announce/2020/06/msg00015.html mailing-list x_refsource_MLIST

https://www.cve.org/CVERecord?id=CVE-2020-2934

Same Patch Batch · Oracle Corporation · 2020-04-15 · 228 CVEs total

CVE-2020-2885		Oracle E-Business Suite Document Management and Collaboration 安全漏洞
CVE-2020-2871		Oracle E-Business Suite Advanced Outbound Telephony 安全漏洞
CVE-2020-2872		Oracle E-Business Suite iSupport 安全漏洞
CVE-2020-2873		Oracle E-Business Suite Customer Interaction History 安全漏洞
CVE-2020-2874		Oracle E-Business Suite Email Center 安全漏洞
CVE-2020-2875		Oracle MySQL 安全漏洞
CVE-2020-2876		Oracle E-Business Suite Marketing 安全漏洞
CVE-2020-2877		Oracle E-Business Suite Partner Management 安全漏洞
CVE-2020-2878		Oracle E-Business Suite iSupport 安全漏洞
CVE-2020-2879		Oracle E-Business Suite Scripting 安全漏洞
CVE-2020-2880		Oracle E-Business Suite Learning Management 安全漏洞
CVE-2020-2881		Oracle E-Business Suite CRM Technical Foundation 安全漏洞
CVE-2020-2882		Oracle E-Business Suite 安全漏洞
CVE-2020-2883		Oracle Fusion Middleware 安全漏洞
CVE-2020-2884		Oracle Fusion Middleware 安全漏洞
CVE-2020-2896		Oracle MySQL 安全漏洞
CVE-2020-2893		Oracle MySQL 安全漏洞
CVE-2020-2894		Oracle Virtualization VM VirtualBox 安全漏洞
CVE-2020-2895		Oracle MySQL 安全漏洞
CVE-2020-2892		Oracle MySQL 安全漏洞

Showing top 20 of 228 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: WebLogic Server

Same vendor: Oracle Corporation

V. Comments for CVE-2020-2934

No comments yet

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2020-2934

Quick assessment

Possible ATT&CK Techniques 1 AI

I. Basic Information for CVE-2020-2934

Vulnerability Information

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Vulnerability Title

Vulnerability Description

CVSS Information

Vulnerability Type

Affected Products

II. Public POCs for CVE-2020-2934

III. Intelligence Information for CVE-2020-2934

Vendor Advisories for CVE-2020-2934 (4)

Mailing List Discussions for CVE-2020-2934 (3)

Same Patch Batch · Oracle Corporation · 2020-04-15 · 228 CVEs total

IV. Related Vulnerabilities

V. Comments for CVE-2020-2934

Leave a comment