Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:mysql_server:9.0.1_and_prior:*:*:*:*:*:*:*

part: a version: 9.0.1_and_prior update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductMysql Server (37692947-b700-5945-bf8e-fc7c3b3c5af2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-21536 vulnerable 2026-06-08 07:08:56.587787 Details available
MEDIUM (4.9)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Published: 2025-01-21T20:53:10.654Z
Updated: 2025-11-03T20:57:57.443Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21534 vulnerable 2026-06-08 07:08:56.584772 Details available
MEDIUM (4.9)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Performance Schema). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Published: 2025-01-21T20:53:09.873Z
Updated: 2025-11-03T20:57:56.068Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21525 vulnerable 2026-06-08 07:08:56.567446 Details available
MEDIUM (4.9)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Published: 2025-01-21T20:53:06.259Z
Updated: 2025-11-03T20:57:51.928Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21521 vulnerable 2026-06-08 07:08:56.565899 Details available
HIGH (7.5)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 7.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H).
Published: 2025-01-21T20:53:04.705Z
Updated: 2025-11-03T20:57:47.686Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21504 vulnerable 2026-06-08 07:08:56.549445 Details available
MEDIUM (4.9)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Published: 2025-01-21T20:52:57.195Z
Updated: 2025-11-03T20:57:40.746Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21494 vulnerable 2026-06-08 07:08:56.513629 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21244 vulnerable 2026-06-08 06:27:32.305070 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21243 vulnerable 2026-06-08 06:27:32.304649 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21241 vulnerable 2026-06-08 06:27:32.293829 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21239 vulnerable 2026-06-08 06:27:32.293281 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21238 vulnerable 2026-06-08 06:27:32.292621 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21237 vulnerable 2026-06-08 06:27:32.291739 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21236 vulnerable 2026-06-08 06:27:32.291086 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21232 vulnerable 2026-06-08 06:27:32.278967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21231 vulnerable 2026-06-08 06:27:32.278555 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21230 vulnerable 2026-06-08 06:27:32.278123 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21219 vulnerable 2026-06-08 06:27:32.277550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21218 vulnerable 2026-06-08 06:27:32.276916 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21213 vulnerable 2026-06-08 06:27:32.269509 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21207 vulnerable 2026-06-08 06:27:32.247130 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21204 vulnerable 2026-06-08 06:27:32.240905 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21203 vulnerable 2026-06-08 06:27:32.238791 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21201 vulnerable 2026-06-08 06:27:32.227769 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21199 vulnerable 2026-06-08 06:27:32.226890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21198 vulnerable 2026-06-08 06:27:32.226316 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21197 vulnerable 2026-06-08 06:27:32.225859 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21196 vulnerable 2026-06-08 06:27:32.225267 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21194 vulnerable 2026-06-08 06:27:32.222661 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-21193 vulnerable 2026-06-08 06:27:32.220015 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.