Oracle Mysql Server vulnerabilities
335 known vulnerabilities affecting oracle/mysql_server.
Total CVEs
335
CISA KEV
0
Public exploits
1
Exploited in wild
0
Severity breakdown
CRITICAL7HIGH22MEDIUM286LOW20
Vulnerabilities
Page 7 of 17
CVE-2021-2385P4MEDIUMCVSS 5.0≥ 5.7.0, ≤ 5.7.34≥ 8.0.0, ≤ 8.0.252021-07-21
CVE-2021-2385 [MEDIUM] CVE-2021-2385: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supporte
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result
nvd
CVE-2024-20964P4MEDIUMCVSS 5.3≥ 8.0.0, ≤ 8.0.35≥ 8.1.0, ≤ 8.2.02024-02-17
CVE-2024-20964 [MEDIUM] CWE-400 CVE-2024-20964: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges).
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnera
nvd
CVE-2024-20994P4MEDIUMCVSS 5.3≥ 8.0.0, ≤ 8.0.36v8.3.02024-04-16
CVE-2024-20994 [MEDIUM] CVE-2024-20994: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema).
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Information Schema). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can r
nvd
CVE-2024-21176P4MEDIUMCVSS 5.3≤ 8.4.02024-07-16
CVE-2024-21176 [MEDIUM] CVE-2024-21176: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supp
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.4.0 and prior. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ab
nvd
CVE-2021-2383P4MEDIUMCVSS 4.9≥ 8.0.0, ≤ 8.0.252021-07-21
CVE-2021-2383 [MEDIUM] CVE-2021-2383: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability t
nvd
CVE-2022-21455P4MEDIUMCVSS 4.9≤ 8.0.292022-07-19
CVE-2022-21455 [MEDIUM] CVE-2022-21455: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin). Supp
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PAM Auth Plugin). Supported versions that are affected are 8.0.28 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized
nvd
CVE-2021-22924P4LOWCVSS 3.7≥ 5.7.0, ≤ 5.7.36≥ 8.0.0, ≤ 8.0.262021-08-05
CVE-2021-22924 [LOW] CWE-20 CVE-2021-22924: libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if
libcurl keeps previously used connections in a connection pool for subsequenttransfers to reuse, if one of them matches the setup.Due to errors in the logic, the config matching function did not take 'issuercert' into account and it compared the involved paths *case insensitively*,which could lead to libcurl reusing wrong connections.File paths are, or c
nvd
CVE-2017-3265P4MEDIUMCVSS 5.6v5.5.53 and earlierv5.6.34 and earlier+1 more2017-01-27
CVE-2017-3265 [MEDIUM] CVE-2017-3265: Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Suppo
Vulnerability in the MySQL Server component of Oracle MySQL (subcomponent: Server: Packaging). Supported versions that are affected are 5.5.53 and earlier, 5.6.34 and earlier and 5.7.16 and earlier. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Succes
nvd
CVE-2021-2342P4MEDIUMCVSS 4.9≥ 5.7.0, ≤ 5.7.34≥ 6.0.0, ≤ 8.0.252021-07-21
CVE-2021-2342 [MEDIUM] CVE-2021-2342: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 5.7.34 and prior and 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in u
nvd
CVE-2021-2367P4MEDIUMCVSS 4.9≥ 8.0.0, ≤ 8.0.252021-07-21
CVE-2021-2367 [MEDIUM] CVE-2021-2367: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability t
nvd
CVE-2022-21418P4MEDIUMCVSS 5.0≥ 8.0.0, ≤ 8.0.282022-04-19
CVE-2022-21418 [MEDIUM] CVE-2022-21418: Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions th
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to caus
nvd
CVE-2026-47052P4MEDIUMCVSS 4.9≥ 8.4.0, ≤ 8.4.10v9.7.0+1 more2026-07-21
CVE-2026-47052 [MEDIUM] CWE-400 CVE-2026-47052: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Suppo
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compro
nvd
CVE-2026-47008P4MEDIUMCVSS 4.9v9.7.0v9.7.12026-07-21
CVE-2026-47008 [MEDIUM] CWE-400 CVE-2026-47008: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Suppo
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful
nvd
CVE-2026-61128P4MEDIUMCVSS 4.9v9.7.0v9.7.12026-07-21
CVE-2026-61128 [MEDIUM] CWE-400 CVE-2026-61128: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimiz
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.
nvd
CVE-2026-61144P4MEDIUMCVSS 4.9v9.7.0v9.7.12026-07-21
CVE-2026-61144 [MEDIUM] CWE-400 CVE-2026-61144: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimiz
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster.
nvd
CVE-2026-60195P4MEDIUMCVSS 4.9v9.7.0v9.7.12026-07-21
CVE-2026-60195 [MEDIUM] CWE-284 CVE-2026-60195: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Du
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Duality). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Clust
nvd
CVE-2026-60194P4MEDIUMCVSS 4.9v9.7.0v9.7.12026-07-21
CVE-2026-60194 [MEDIUM] CWE-284 CVE-2026-60194: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Du
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: JSON Duality). Supported versions that are affected are MySQL Server: 9.7.0-9.7.1; MySQL Cluster: 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Clust
nvd
CVE-2026-60145P4MEDIUMCVSS 4.9≥ 8.4.0, ≤ 8.4.10v9.7.0+1 more2026-07-21
CVE-2026-60145 [MEDIUM] CWE-284 CVE-2026-60145: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimiz
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protoco
nvd
CVE-2026-21937P4MEDIUMCVSS 4.9≥ 8.0.0, ≤ 8.0.44≥ 8.4.0, ≤ 8.4.7+1 more2026-01-20
CVE-2026-21937 [MEDIUM] CVE-2026-21937: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versi
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in u
nvd
CVE-2026-21941P4MEDIUMCVSS 4.9≥ 8.0.0, ≤ 8.0.44≥ 8.4.0, ≤ 8.4.7+1 more2026-01-20
CVE-2026-21941 [MEDIUM] CWE-400 CVE-2026-21941: Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.44, 8.4.0-8.4.7 and 9.0.0-9.5.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability c
nvd