Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:mysql:9.0.1:*:*:*:*:*:*:*

part: a version: 9.0.1 update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductMysql (73f061c3-5e03-5b81-8702-d9e22bdb3e50)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/mysql/mysql-server purl2cpe 2026-06-01 10:18:14.820612

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-21247 vulnerable 2026-06-08 06:27:32.310237 Details available
LOW (3.8)
Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Client accessible data as well as unauthorized read access to a subset of MySQL Client accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).
Published: 2024-10-15T19:52:50.451Z
Updated: 2025-03-13T15:52:46.706Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21244 vulnerable 2026-06-08 06:27:32.305136 Details available
LOW (2.2)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Telemetry). Supported versions that are affected are 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).
Published: 2024-10-15T19:52:49.601Z
Updated: 2025-11-03T21:53:23.464Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21243 vulnerable 2026-06-08 06:27:32.304710 Details available
LOW (2.2)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Telemetry). Supported versions that are affected are 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).
Published: 2024-10-15T19:52:49.305Z
Updated: 2025-11-03T21:53:22.000Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21241 vulnerable 2026-06-08 06:27:32.293882 Details available
MEDIUM (4.9)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Published: 2024-10-15T19:52:48.644Z
Updated: 2025-11-03T21:53:20.461Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21239 vulnerable 2026-06-08 06:27:32.293439 Details available
MEDIUM (4.9)
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Published: 2024-10-15T19:52:48.332Z
Updated: 2025-11-03T21:53:19.000Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21238 vulnerable 2026-06-08 06:27:32.292785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21237 vulnerable 2026-06-08 06:27:32.291791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21236 vulnerable 2026-06-08 06:27:32.291238 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21232 vulnerable 2026-06-08 06:27:32.279027 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21231 vulnerable 2026-06-08 06:27:32.278611 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21230 vulnerable 2026-06-08 06:27:32.278180 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21219 vulnerable 2026-06-08 06:27:32.277606 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21218 vulnerable 2026-06-08 06:27:32.277098 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21213 vulnerable 2026-06-08 06:27:32.269688 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21209 vulnerable 2026-06-08 06:27:32.263872 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21207 vulnerable 2026-06-08 06:27:32.247200 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21204 vulnerable 2026-06-08 06:27:32.240974 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21203 vulnerable 2026-06-08 06:27:32.238960 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21201 vulnerable 2026-06-08 06:27:32.227827 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21199 vulnerable 2026-06-08 06:27:32.226945 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21198 vulnerable 2026-06-08 06:27:32.226492 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21197 vulnerable 2026-06-08 06:27:32.225918 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21196 vulnerable 2026-06-08 06:27:32.225429 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21194 vulnerable 2026-06-08 06:27:32.222717 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21193 vulnerable 2026-06-08 06:27:32.222044 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.