Unspecified vulnerability in the MySQL Enterprise Monitor component in Oracle MySQL 3.0.25 and earlier and 3.1.2 and earlier allows remote administrators to affect confidentiality, integrity, and availability via vectors related to Monitoring: Server.

Oracle reports reports :

Critical Patch Update contains 31 new security fixes for Oracle MySQL 5.5.48, 5.6.29, 5.7.11 and earlier

According to its self-reported version, the MySQL Enterprise Monitor application running on the remote host is 3.0.x prior to 3.0.26 or 3.1.x prior to 3.1.2. It is, therefore, affected by an unspecified remote code execution vulnerability that be exploited by an authenticated, remote attacker.

ID	Name	Product	Family	Severity
90847	FreeBSD : MySQL -- multiple vulnerabilities (8c2b2f11-0ebe-11e6-b55e-b499baebfeaf)	Nessus	FreeBSD Local Security Checks	critical
90685	MySQL Enterprise Monitor 3.0.x < 3.0.26 / 3.1.x < 3.1.2 Unspecified RCE	Nessus	CGI abuses	high

Detections

Analytics

CVE-2016-3461

high

Tenable Plugins

critical

high