CVE-2025-30714 — Improper Access Control in Corporation Mysql Connectors
Severity
4.8MEDIUMNVD
EPSS
0.2%
top 54.86%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedApr 15
Description
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that are affected are 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Conn…
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:NExploitability: 1.2 | Impact: 3.6
Affected Packages2 packages
Patches
🔴Vulnerability Details
3CVEList▶
CVE-2025-30714: Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python)↗2025-04-15
GHSA▶
GHSA-mh6h-m5cw-m257: Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python)↗2025-04-15
OSV▶
CVE-2025-30714: Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python)↗2025-04-15