Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data. CVSS 3.1 Base Score 4.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N).
Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.
| Vendor | Product | Versions | |
|---|---|---|---|
| oracle | mysql | 8.0.0 – ≤ 8.0.42 | |
| Oracle Corporation | MySQL Cluster | 7.6.0 – ≤ 7.6.34, 8.0.0 – ≤ 8.0.42, 8.4.0 – ≤ 8.4.5, 9.0.0 – ≤ 9.3.0 | |
| Oracle Corporation | MySQL Server | 8.0.0 – ≤ 8.0.42, 8.4.0 – ≤ 8.4.5, 9.0.0 – ≤ 9.3.0 |
cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* ≥ 8.0.0 ≤ 8.0.42cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* ≥ 8.4.0 ≤ 8.4.5cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* ≥ 9.0.0 ≤ 9.3.0Two free tools, one defence: the Sensor catches whoever probes your server; Shield stops known attackers before they reach your site.
Install it and your daily API quota goes to 30,000 lookups — nothing to apply for.