CVE-2025-30722

10 documents8 sources
Severity
6.8MEDIUM
EPSS
0.3%
top 43.35%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
4
Oracle Corporation Mysql ClientOracle Corporation Mysql ClusterOracle Mysql Client+1 more
Timeline
PublishedApr 15
Latest updateJun 2

Description

Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Client accessible data as well as unauthorized update, insert or …

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:NExploitability: 1.6 | Impact: 3.6

Affected Packages6 packages

▶NVDoracle/mysql_client8.0.0 — 8.0.41+2
▶CVEListV5oracle_corporation/mysql_client8.0.0 — 8.0.41+2
▶NVDoracle/mysql_cluster7.6.0 — 7.6.33+3
▶CVEListV5oracle_corporation/mysql_cluster7.6.0 — 7.6.33+3
▶Debianmariadb< 1:10.11.13-0+deb12u1+2

🔴Vulnerability Details

3
CVEList
CVE-2025-30722: Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump)↗2025-04-15
▶
OSV
CVE-2025-30722: Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump)↗2025-04-15
▶
GHSA
GHSA-53hw-hvww-v6v8: Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump)↗2025-04-15
▶

📋Vendor Advisories

6
Ubuntu
MariaDB vulnerabilities↗2025-06-02
▶
Ubuntu
MariaDB vulnerabilities↗2025-05-20
▶
Ubuntu
MySQL vulnerabilities↗2025-05-05
▶
Oracle
Oracle Oracle MySQL Risk Matrix: Client: mysqldump — CVE-2025-30722↗2025-04-15
▶
Red Hat
mysql: mariadb: mysqldump unspecified vulnerability (CPU Apr 2025)↗2025-04-15
▶