CVE-2019-2791: Medium severity ORACLE MySQL vulnerability
Last updated 18 August 2025
Other sources
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Audit Plug-in). Supported versions that are affected are 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.0 Base Score 3.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2019-2791?
CVE-2019-2791 is considered an easily exploitable vulnerability that allows a high privileged attacker with network access.
How do I fix CVE-2019-2791?
To fix CVE-2019-2791, upgrade your MySQL Server to version 5.7.27 or later, or to version 8.0.17 or later.
Which MySQL versions are affected by CVE-2019-2791?
CVE-2019-2791 affects MySQL versions 5.7.26 and earlier, as well as 8.0.16 and earlier.
What components are impacted by CVE-2019-2791?
CVE-2019-2791 impacts the MySQL Server component specifically within the Server: Audit Plug-in.
What can an attacker do by exploiting CVE-2019-2791?
An attacker exploiting CVE-2019-2791 can potentially gain unauthorized access and manipulate the database if they have network access.