Oracle MySQL vulnerabilities
1,330 known vulnerabilities affecting oracle/mysql.
Total CVEs
1,330
CISA KEV
0
Public exploits
50
Exploited in wild
2
Severity breakdown
CRITICAL12HIGH71MEDIUM1066LOW181
Vulnerabilities
Page 66 of 67
CVE-2022-21325P4LOWCVSS 2.9≥ 7.4.0, ≤ 7.4.34≥ 7.5.0, ≤ 7.5.24+2 more2022-01-19
CVE-2022-21325 [LOW] CVE-2022-21325: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL
nvd
CVE-2022-21321P4LOWCVSS 2.9≥ 7.4.0, ≤ 7.4.34≥ 7.5.0, ≤ 7.5.24+2 more2022-01-19
CVE-2022-21321 [LOW] CVE-2022-21321: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL
nvd
CVE-2022-21324P4LOWCVSS 2.9≥ 7.4.0, ≤ 7.4.34≥ 7.5.0, ≤ 7.5.24+2 more2022-01-19
CVE-2022-21324 [LOW] CVE-2022-21324: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL
nvd
CVE-2022-21333P4LOWCVSS 2.9≥ 7.4.0, ≤ 7.4.34≥ 7.5.0, ≤ 7.5.24+2 more2022-01-19
CVE-2022-21333 [LOW] CVE-2022-21333: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL
nvd
CVE-2022-21357P4LOWCVSS 2.9≥ 7.4.0, ≤ 7.4.34≥ 7.5.0, ≤ 7.5.24+2 more2022-01-19
CVE-2022-21357 [LOW] CVE-2022-21357: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL
nvd
CVE-2022-21355P4LOWCVSS 2.9≥ 7.4.0, ≤ 7.4.34≥ 7.5.0, ≤ 7.5.24+2 more2022-01-19
CVE-2022-21355 [LOW] CVE-2022-21355: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL
nvd
CVE-2022-21317P4LOWCVSS 2.9≥ 7.4.0, ≤ 7.4.34≥ 7.5.0, ≤ 7.5.24+2 more2022-01-19
CVE-2022-21317 [LOW] CVE-2022-21317: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL
nvd
CVE-2022-21319P4LOWCVSS 2.9≥ 7.4.0, ≤ 7.4.34≥ 7.5.0, ≤ 7.5.24+2 more2022-01-19
CVE-2022-21319 [LOW] CVE-2022-21319: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL
nvd
CVE-2013-2391P4LOWCVSS 3.0≥ 5.1.0, ≤ 5.1.71≥ 5.5.0, ≤ 5.5.33+1 more2013-04-17
CVE-2013-2391 [LOW] CVE-2013-2391: Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and ear
Unspecified vulnerability in Oracle MySQL 5.1.68 and earlier, 5.5.30 and earlier, and 5.6.10 and earlier allows local users to affect confidentiality and integrity via unknown vectors related to Server Install.
nvd
CVE-2022-21372P4LOWCVSS 2.7≥ 8.0.0, ≤ 8.0.272022-01-19
CVE-2022-21372 [LOW] CVE-2022-21372: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption).
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Encryption). Supported versions that are affected are 8.0.27 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorize
nvd
CVE-2025-50098P4LOWCVSS 2.7≥ 8.0.0, ≤ 8.0.42≥ 8.4.0, ≤ 8.4.5+1 more2025-07-15
CVE-2025-50098 [LOW] CWE-400 CVE-2025-50098: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can
nvd
CVE-2025-50104P4LOWCVSS 2.7≥ 8.0.0, ≤ 8.0.42≥ 8.4.0, ≤ 8.4.5+1 more2025-07-15
CVE-2025-50104 [LOW] CWE-400 CVE-2025-50104: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versi
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result
nvd
CVE-2024-21232P4LOWCVSS 2.2≥ 8.4.0, ≤ 8.4.2v9.0.0+1 more2024-10-15
CVE-2024-21232 [LOW] CWE-400 CVE-2024-21232: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services).
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerabilit
nvd
CVE-2024-21237P4LOWCVSS 2.2≥ 8.0.0, ≤ 8.0.39≥ 8.4.0, ≤ 8.4.2+2 more2024-10-15
CVE-2024-21237 [LOW] CVE-2024-21237: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication GCS)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication GCS). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this
nvd
CVE-2006-3486P4LOWCVSS 2.1v5.0.6v5.0.7+20 more2006-07-10
CVE-2006-3486 [LOW] CWE-189 CVE-2006-3486: Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_opt
Off-by-one buffer overflow in the Instance_options::complete_initialization function in instance_options.cc in the Instance Manager in MySQL before 5.0.23 and 5.1 before 5.1.12 might allow local users to cause a denial of service (application crash) via unspecified vectors, which triggers the overflow when the convert_dirname function is called. NOTE: th
nvd
CVE-2024-21101P4LOWCVSS 2.2≥ 7.5.0, ≤ 7.5.33≥ 7.6.0, ≤ 7.6.29+2 more2024-04-16
CVE-2024-21101 [LOW] CWE-269 CVE-2024-21101: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.5.33 and prior, 7.6.29 and prior, 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Cluster. Successful
nvd
CVE-2024-21209P4LOWCVSS 2.0≥ 8.4.0, ≤ 8.4.2v9.0.0+1 more2024-10-15
CVE-2024-21209 [LOW] CWE-200 CVE-2024-21209: Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported
Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks require human interaction from
nvd
CVE-2018-3084P4LOWCVSS 2.8≥ 8.0.0, ≤ 8.0.112018-07-18
CVE-2018-3084 [LOW] CVE-2018-3084: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Shell: Core / Client). Su
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Shell: Core / Client). Supported versions that are affected are 8.0.11 and prior. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a pe
nvd
CVE-2021-2042P4LOWCVSS 2.3≥ 8.0.0, ≤ 8.0.212021-01-20
CVE-2021-2042 [LOW] CVE-2021-2042: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions th
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.21 and prior. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read
nvd
CVE-2025-50100P4LOWCVSS 2.2≥ 8.0.0, ≤ 8.0.42≥ 8.4.0, ≤ 8.4.5+1 more2025-07-15
CVE-2025-50100 [LOW] CWE-400 CVE-2025-50100: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supp
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerabili
nvd