Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:mysql_server:8.0.36_and_prior:*:*:*:*:*:*:*

part: a version: 8.0.36_and_prior update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductMysql Server (37692947-b700-5945-bf8e-fc7c3b3c5af2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-21492 vulnerable 2026-06-08 07:08:56.506436 Details available
MEDIUM (4.9)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Published: 2025-01-21T20:52:53.040Z
Updated: 2025-01-24T20:03:15.282Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21102 vulnerable 2026-06-08 06:27:32.063822 Details available
MEDIUM (4.9)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Published: 2024-04-16T21:26:32.949Z
Updated: 2025-03-26T21:15:31.380Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21096 vulnerable 2026-06-08 06:27:32.051678 Details available
MEDIUM (4.9)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Difficult to exploit vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L).
Published: 2024-04-16T21:26:30.986Z
Updated: 2025-02-13T17:33:09.516Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21087 vulnerable 2026-06-08 06:27:32.029221 Details available
MEDIUM (4.9)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Group Replication Plugin). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Published: 2024-04-16T21:26:27.815Z
Updated: 2025-03-13T18:41:13.760Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21069 vulnerable 2026-06-08 06:27:32.004790 Details available
MEDIUM (4.9)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.36 and prior and 8.3.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Published: 2024-04-16T21:26:21.750Z
Updated: 2025-02-13T17:33:06.847Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21062 vulnerable 2026-06-08 06:27:31.983785 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21060 vulnerable 2026-06-08 06:27:31.982569 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21054 vulnerable 2026-06-08 06:27:31.973368 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21047 vulnerable 2026-06-08 06:27:31.955540 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21013 vulnerable 2026-06-08 06:27:31.928208 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21009 vulnerable 2026-06-08 06:27:31.912748 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21008 vulnerable 2026-06-08 06:27:31.911958 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21000 vulnerable 2026-06-08 06:27:31.893812 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20998 vulnerable 2026-06-08 06:27:31.887379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-20994 vulnerable 2026-06-08 06:27:31.878911 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.