Vulnerability

CVE-2017-3653

LOW 3.1

CVE-2017-3653 is a low-severity vulnerability (CVSS v3.1 3.1). As of 2026-11-07, 14 137 hosts in our data show software it affects on an open service in at least 15 countries.

Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: DDL). Supported versions that are affected are 5.5.56 and earlier, 5.6.36 and earlier and 5.7.18 and earlier. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.0 Base Score 3.1 (Integrity impacts). CVSS Vector: (CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N).

Published
2017-08-08
Last modified
2026-06-17
CVSS score
3.1 CVSS v3.1
CVSS vector (v3.1)
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:L/A:N
Exploit likelihood (EPSS)
1.9% in the next 30 days (top 21% of CVEs)

Exposure in our data

14 137 hosts

Hosts whose banner shows an affected software version on a service open at their latest check.

Not counted: 260 hosts with this CVE only from an older observation.

Not counted: 2 hosts where the software version is too vague to tell (only a major release).

Not counted: 381 more on distribution builds that may be patched (the distribution may have backported the fix without changing the version).

6 024 more hosts had it earlier (the software version has since changed or the service is gone).

Counted 2026-11-07 04:20 UTC

By country

China CN8 124
United States US1 829
South Korea KR864
Japan JP456
Hong Kong HK375
Russia RU260
India IN223
Taiwan TW198
Brazil BR187
Türkiye TR181
Singapore SG163
Indonesia ID140
Serbia RS140
Canada CA119
Thailand TH90

Affected software seen

mysql 5.6.161 619
mysql 5.5.18.1772
mysql 5.7.17725
mysql 5.6.25523
mysql 5.7.12465
mysql 5.7.18424
mysql 5.7.16380
mysql 5.5.53355
mysql 5.6.21317
mysql 5.6.35253
mysql 5.5.28252
mysql 5.6.36211