Servers and applications

CVE-2012-3160

Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.65 and earlier, and 5.5.27 and earlier, allows local users to affect confidentiality via unknown vectors related to Server Installation.

Severity: Low 2.1
Published: 16 Oct 2012
Last changed: 16 Jun 2026
Added to UpHeron: 17 Oct 2026
Fixed in: 5.1.66, 5.5.28
Exploit chance: 0.5% in the next 30 daysHigher than 40% of CVEs. EPSS by FIRST, 12 Nov 2026
Attack: Needs local access · No login needed
Attacker can: Read some data
CVSS vector: AV:L/AC:L/Au:N/C:P/I:N/A:N
Sources: NVD

Affected software

Software	Affected versions
MariaDBServers and applications · `cpe:a:mariadb:mariadb`	From 5.1.0 before 5.1.66 From 5.5.0 before 5.5.28
MySQLServers and applications · `cpe:a:oracle:mysql`	From 5.1.0 up to 5.1.65 From 5.5.0 up to 5.5.27

References

NVD https://nvd.nist.gov/vuln/detail/CVE-2012-3160
CVE.org https://www.cve.org/CVERecord?id=CVE-2012-3160