Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). The supported version that is affected is 26.7.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to com…
CVE-2025-21492
Açıklama
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.
Etkilenen ürünler ve sürümler
| Üretici | Ürün | Sürümler | |
|---|---|---|---|
| netapp | active iq unified manager | — | |
| netapp | oncommand insight | — | |
| netapp | oncommand workflow automation | — | |
| Oracle Corporation | MySQL Server | ≤ 8.0.36, 8.4.0 |
Kaynaklar ve yamalar
- Oracle Advisory vendor-advisoryVendor Advisory
- https://security.netapp.com/advisory/ntap-20250124-0011/ Third Party Advisory
CPE eşleşmeleri (NVD) (6)
cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*≥ 8.0.0 ≤ 8.0.36cpe:2.3:a:oracle:mysql_server:8.4.0:*:*:*:*:*:*:*cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:windows:*:*cpe:2.3:a:netapp:oncommand_insight:-:*:*:*:*:*:*:*cpe:2.3:a:netapp:oncommand_workflow_automation:-:*:*:*:*:*:*:*