Vulnerability
CVE-2016-5437
CVE-2016-5437 is a medium-severity vulnerability (CVSS v3.0 4.9). As of 2026-10-09, 33 613 hosts in our data show software it affects on an open service in at least 15 countries.
Unspecified vulnerability in Oracle MySQL 5.7.12 and earlier allows remote administrators to affect availability via vectors related to Server: Log.
- Published
- 2016-07-21
- Last modified
- 2026-06-17
- CVSS score
- 4.9 CVSS v3.0
- CVSS vector (v3.0)
- CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H
- Exploit likelihood (EPSS)
- 2.2% in the next 30 days (higher than 82% of CVEs)
Exposure in our data
33 613 hosts
Hosts whose banner shows an affected software version on a service open at their latest check.
Not counted: 701 hosts with this CVE only from an older observation.
Not counted: 2 hosts where the software version is too vague to tell (only a major release).
Not counted: 1 060 more on distribution builds that may be patched (the distribution may have backported the fix without changing the version).
581 more hosts had it earlier (the software version has since changed or the service is gone).
Counted 2026-10-09 08:20 UTC
By country
| China CN | 21 356 |
| United States US | 3 862 |
| Hong Kong HK | 1 602 |
| South Korea KR | 1 218 |
| Russia RU | 760 |
| Japan JP | 729 |
| Türkiye TR | 521 |
| Singapore SG | 508 |
| India IN | 449 |
| Taiwan TW | 258 |
| Brazil BR | 250 |
| Malaysia MY | 225 |
| Serbia RS | 223 |
| Indonesia ID | 196 |
| Canada CA | 173 |
Affected software seen
| mysql 5.6.50 | 5 736 |
| mysql 5.6.51 | 4 644 |
| mysql 5.5.62 | 3 230 |
| mysql 5.1.73 | 1 997 |
| mysql 5.6.16 | 1 574 |
| mysql 5.5.18.1 | 770 |
| mysql 5.6.25 | 514 |
| mysql 5.6.49 | 498 |
| mysql 5.7.12 | 463 |
| mysql 5.6.43 | 376 |
| mysql 5.6.44 | 350 |
| mysql 5.6.42 | 349 |