Oracle MySQL vulnerabilities

1,330 known vulnerabilities affecting oracle/mysql.

Total CVEs

1,330

CISA KEV

Public exploits

Exploited in wild

Severity breakdown

CRITICAL12HIGH71MEDIUM1066LOW181

Vulnerabilities

SortPage 62 of 67

CVE-2012-0117P4LOWCVSS 3.5v5.5.0v5.5.1+20 more2012-01-18

CVE-2012-0117 [LOW] CVE-2012-0117: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenti Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.x allows remote authenticated users to affect availability via unknown vectors, a different vulnerability than CVE-2012-0486, CVE-2012-0487, CVE-2012-0488, CVE-2012-0489, CVE-2012-0491, CVE-2012-0493, and CVE-2012-0495.

nvd

CVE-2014-4274P4MEDIUMCVSS 4.1≥ 5.5.0, ≤ 5.5.38≥ 5.6.0, ≤ 5.6.192014-10-15

CVE-2014-4274 [MEDIUM] CVE-2014-4274: Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows lo Unspecified vulnerability in Oracle MySQL Server 5.5.38 and earlier and 5.6.19 and earlier allows local users to affect confidentiality, integrity, and availability via vectors related to SERVER:MyISAM.

nvd

CVE-2013-3810P4LOWCVSS 3.5≤ 5.6.11v5.6.0+10 more2013-07-17

CVE-2013-3810 [LOW] CVE-2013-3810: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows re Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to XA Transactions.

nvd

CVE-2016-0601P4LOWCVSS 3.5v5.7.92016-01-21

CVE-2016-0601 [LOW] CVE-2016-0601: Unspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect availabi Unspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Partition.

nvd

CVE-2016-0599P4LOWCVSS 3.5v5.7.92016-01-21

CVE-2016-0599 [LOW] CVE-2016-0599: Unspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect availabi Unspecified vulnerability in Oracle MySQL 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to Optimizer.

nvd

CVE-2022-39403P4LOWCVSS 3.9≥ 8.0, ≤ 8.0.302022-10-18

CVE-2022-39403 [LOW] CVE-2022-39403: Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported Vulnerability in the MySQL Shell product of Oracle MySQL (component: Shell: Core Client). Supported versions that are affected are 8.0.30 and prior. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Shell executes to compromise MySQL Shell. Successful attacks require human interaction from a person othe

nvd

CVE-2014-6474P4LOWCVSS 3.5≥ 5.6.0, ≤ 5.6.192014-10-15

CVE-2014-6474 [LOW] CVE-2014-6474: Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated user Unspecified vulnerability in Oracle MySQL Server 5.6.19 and earlier allows remote authenticated users to affect availability via vectors related to SERVER:MEMCACHED.

nvd

CVE-2015-0385P4LOWCVSS 3.5≤ 5.6.212015-01-21

CVE-2015-0385 [LOW] CVE-2015-0385: Unspecified vulnerability in Oracle MySQL Server 5.6.21 and earlier allows remote authenticated user Unspecified vulnerability in Oracle MySQL Server 5.6.21 and earlier allows remote authenticated users to affect availability via unknown vectors related to Pluggable Auth.

nvd

CVE-2014-2451P4LOWCVSS 3.5≤ 5.6.15v5.6.0+14 more2014-04-16

CVE-2014-2451 [LOW] CVE-2014-2451: Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated user Unspecified vulnerability in Oracle MySQL Server 5.6.15 and earlier allows remote authenticated users to affect availability via unknown vectors related to Privileges.

nvd

CVE-2016-0607P4LOWCVSS 2.8≤ 5.6.27v5.7.92016-01-21

CVE-2016-0607 [LOW] CVE-2016-0607: Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated u Unspecified vulnerability in Oracle MySQL 5.6.27 and earlier and 5.7.9 allows remote authenticated users to affect availability via unknown vectors related to replication.

nvd

CVE-2016-8288P4LOWCVSS 3.1≥ 5.6.0, ≤ 5.6.30≥ 5.7.0, ≤ 5.7.122016-10-25

CVE-2016-8288 [LOW] CWE-284 CVE-2016-8288: Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote au Unspecified vulnerability in Oracle MySQL 5.6.30 and earlier and 5.7.12 and earlier allows remote authenticated users to affect integrity via vectors related to Server: InnoDB Plugin.

nvd

CVE-2013-1506P4LOWCVSS 2.8≥ 5.1.0, ≤ 5.1.67≥ 5.5.0, ≤ 5.5.29+1 more2013-04-17

CVE-2013-1506 [LOW] CVE-2013-1506: Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier, 5.5.29 and earlier, and 5.6.10 and ear Unspecified vulnerability in Oracle MySQL 5.1.67 and earlier, 5.5.29 and earlier, and 5.6.10 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Locking.

nvd

CVE-2015-4910P4LOWCVSS 2.1≤ 5.6.262015-10-22

CVE-2015-4910 [LOW] CVE-2015-4910: Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated user Unspecified vulnerability in Oracle MySQL Server 5.6.26 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Memcached.

nvd

CVE-2015-4767P4LOWCVSS 1.7≤ 5.6.242015-07-16

CVE-2015-4767 [LOW] CVE-2015-4767: Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated user Unspecified vulnerability in Oracle MySQL Server 5.6.24 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server : Security : Firewall, a different vulnerability than CVE-2015-4769.

nvd

CVE-2006-4031P4LOWCVSS 2.1v3.22.27v3.22.28+123 more2006-08-09

CVE-2006-4031 [LOW] CVE-2006-4031: MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previo MySQL 4.1 before 4.1.21 and 5.0 before 5.0.24 allows a local user to access a table through a previously created MERGE table, even after the user's privileges are revoked for the original table, which might violate intended security policy.

nvd

CVE-2015-0498P4LOWCVSS 1.7≤ 5.6.232015-04-16

CVE-2015-0498 [LOW] CVE-2015-0498: Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated user Unspecified vulnerability in Oracle MySQL Server 5.6.23 and earlier allows remote authenticated users to affect availability via unknown vectors related to Replication.

nvd

CVE-2016-0667P4MEDIUMCVSS 4.4≤ 5.7.112016-04-21

CVE-2016-0667 [MEDIUM] CVE-2016-0667: Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availabili Unspecified vulnerability in Oracle MySQL 5.7.11 and earlier allows local users to affect availability via vectors related to Locking.

nvd

CVE-2018-2773P4MEDIUMCVSS 4.1≥ 5.5.0, ≤ 5.5.59≥ 5.6.0, ≤ 5.6.39+1 more2018-04-19

CVE-2018-2773 [MEDIUM] CVE-2018-2773: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Support Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Client programs). Supported versions that are affected are 5.5.59 and prior, 5.6.39 and prior and 5.7.21 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful att

nvd

CVE-2022-21611P4MEDIUMCVSS 4.1≥ 8.0, ≤ 8.0.302022-10-18

CVE-2022-21611 [MEDIUM] CVE-2022-21611: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions th Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.30 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthoriz

nvd

CVE-2013-3811P4LOWCVSS 3.5≤ 5.6.11v5.6.0+10 more2013-07-17

CVE-2013-3811 [LOW] CVE-2013-3811: Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows re Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.6.11 and earlier allows remote authenticated users to affect availability via unknown vectors related to InnoDB, a different vulnerability than CVE-2013-3806.

nvd

← Previous62 / 67Next →