Oracle Mysql Cluster vulnerabilities
89 known vulnerabilities affecting oracle/mysql_cluster.
Total CVEs
89
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1HIGH11MEDIUM66LOW11
Vulnerabilities
Page 3 of 5
CVE-2026-60181P4MEDIUMCVSS 6.7v9.7.0v9.7.12026-07-21
CVE-2026-60181 [MEDIUM] CWE-284 CVE-2026-60181: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Configu
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Configurator). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to co
nvd
CVE-2019-10219P4MEDIUMCVSS 6.1fixed in 7.4.34≥ 7.5.0, < 7.5.24+2 more2019-11-08
CVE-2019-10219 [MEDIUM] CWE-79 CVE-2019-10219: A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properl
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting of potentially malicious code in HTML comments and instructions. This vulnerability can result in an XSS attack.
nvd
CVE-2025-50068P4MEDIUMCVSS 6.7≥ 8.0.0, ≤ 8.0.42≥ 8.4.0, ≤ 8.4.5+1 more2025-07-15
CVE-2025-50068 [MEDIUM] CVE-2025-50068: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Cluster executes to compromise MySQL Cluster. Successful attacks of this vul
nvd
CVE-2022-21519P4MEDIUMCVSS 5.9≤ 8.0.292022-07-19
CVE-2022-21519 [MEDIUM] CVE-2022-21519: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.29 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized abil
nvd
CVE-2025-30693P4MEDIUMCVSS 5.5≥ 7.6.0, ≤ 7.6.33≥ 8.0.0, ≤ 8.0.41+2 more2025-04-15
CVE-2025-30693 [MEDIUM] CWE-284 CVE-2025-30693: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions t
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result i
nvd
CVE-2016-5541P4MEDIUMCVSS 4.8≤ 7.2.26≤ 7.3.14+4 more2017-01-27
CVE-2016-5541 [MEDIUM] CVE-2016-5541: Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI). Suppor
Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: NDBAPI). Supported versions that are affected are 7.2.26 and earlier, 7.3.14 and earlier and 7.4.12 and earlier. Difficult to exploit vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of th
nvd
CVE-2026-60747P4MEDIUMCVSS 6.2≥ 8.0.0, ≤ 8.0.47≥ 8.4.0, ≤ 8.4.10+2 more2026-07-21
CVE-2026-60747 [MEDIUM] CWE-400 CVE-2026-60747: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replica
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where
nvd
CVE-2017-3304P4MEDIUMCVSS 5.4≤ 7.2.27≤ 7.3.16+2 more2017-04-24
CVE-2017-3304 [MEDIUM] CVE-2017-3304: Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: DD). Supported
Vulnerability in the MySQL Cluster component of Oracle MySQL (subcomponent: Cluster: DD). Supported versions that are affected are 7.2.27 and earlier, 7.3.16 and earlier, 7.4.14 and earlier and 7.5.5 and earlier. Easily "exploitable" vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Cluster. Successful
nvd
CVE-2018-1324P4MEDIUMCVSS 5.5≤ 7.4.34≥ 7.5.0, ≤ 7.5.24+2 more2018-03-16
CVE-2018-1324 [MEDIUM] CWE-835 CVE-2018-1324: A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compr
A specially crafted ZIP archive can be used to cause an infinite loop inside of Apache Commons Compress' extra field parser used by the ZipFile and ZipArchiveInputStream classes in versions 1.11 to 1.15. This can be used to mount a denial of service attack against services that use Compress' zip package.
nvd
CVE-2026-47023P4MEDIUMCVSS 4.9≥ 8.0.0, ≤ 8.0.47≥ 8.4.0, ≤ 8.4.10+2 more2026-07-21
CVE-2026-47023 [MEDIUM] CWE-400 CVE-2026-47023: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replica
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple proto
nvd
CVE-2023-21860P4MEDIUMCVSS 6.3≥ 7.4.0, ≤ 7.4.38≥ 7.5.0, ≤ 7.5.28+2 more2023-01-18
CVE-2023-21860 [MEDIUM] CWE-284 CVE-2023-21860: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: Internal Operations)
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: Internal Operations). Supported versions that are affected are 7.4.38 and prior, 7.5.28 and prior, 7.6.24 and prior and 8.0.31 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the
nvd
CVE-2026-47052P4MEDIUMCVSS 4.9≥ 8.0.0, ≤ 8.0.47≥ 8.4.0, ≤ 8.4.10+2 more2026-07-21
CVE-2026-47052 [MEDIUM] CWE-400 CVE-2026-47052: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Suppo
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compro
nvd
CVE-2026-60171P4MEDIUMCVSS 4.9≥ 8.0.0, ≤ 8.0.472026-07-21
CVE-2026-60171 [MEDIUM] CWE-400 CVE-2026-60171: Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supporte
Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.47. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized a
nvd
CVE-2026-61144P4MEDIUMCVSS 4.9v9.7.0v9.7.12026-07-21
CVE-2026-61144 [MEDIUM] CWE-400 CVE-2026-61144: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimiz
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.
nvd
CVE-2026-60195P4MEDIUMCVSS 4.9v9.7.0v9.7.12026-07-21
CVE-2026-60195 [MEDIUM] CWE-284 CVE-2026-60195: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Du
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Duality). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Clust
nvd
CVE-2026-60194P4MEDIUMCVSS 4.9v9.7.0v9.7.12026-07-21
CVE-2026-60194 [MEDIUM] CWE-284 CVE-2026-60194: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Du
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Duality). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Clust
nvd
CVE-2026-60145P4MEDIUMCVSS 4.9≥ 8.0.0, ≤ 8.0.47≥ 8.4.0, ≤ 8.4.10+2 more2026-07-21
CVE-2026-60145 [MEDIUM] CWE-284 CVE-2026-60145: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimiz
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoco
nvd
CVE-2026-47008P4MEDIUMCVSS 4.9v9.7.0v9.7.12026-07-21
CVE-2026-47008 [MEDIUM] CWE-400 CVE-2026-47008: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Suppo
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful
nvd
CVE-2026-61128P4MEDIUMCVSS 4.9v9.7.0v9.7.12026-07-21
CVE-2026-61128 [MEDIUM] CWE-400 CVE-2026-61128: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimiz
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.
nvd
CVE-2026-21936P4MEDIUMCVSS 4.9≥ 7.6.0, ≤ 7.6.36≥ 8.0.0, ≤ 8.0.44+2 more2026-01-20
CVE-2026-21936 [MEDIUM] CVE-2026-21936: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions t
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauth
nvd