Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:mysql_server:8.0.40_and_prior:*:*:*:*:*:*:*

part: a version: 8.0.40_and_prior update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductMysql Server (37692947-b700-5945-bf8e-fc7c3b3c5af2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-21559 vulnerable 2026-06-08 07:08:56.628426 Details available
MEDIUM (5.5)
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
Published: 2025-01-21T20:53:19.677Z
Updated: 2025-11-03T20:58:06.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21555 vulnerable 2026-06-08 07:08:56.621190 Details available
MEDIUM (5.5)
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
Published: 2025-01-21T20:53:18.135Z
Updated: 2025-11-03T20:58:05.076Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21546 vulnerable 2026-06-08 07:08:56.598484 Details available
LOW (3.8)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).
Published: 2025-01-21T20:53:14.687Z
Updated: 2025-11-03T20:58:03.540Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21543 vulnerable 2026-06-08 07:08:56.597565 Details available
MEDIUM (4.9)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Packaging). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Published: 2025-01-21T20:53:13.601Z
Updated: 2025-11-03T20:58:00.296Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21540 vulnerable 2026-06-08 07:08:56.591463 Details available
MEDIUM (5.4)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 5.4 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N).
Published: 2025-01-21T20:53:12.277Z
Updated: 2025-11-03T20:57:58.856Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21531 vulnerable 2026-06-08 07:08:56.579444 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21529 vulnerable 2026-06-08 07:08:56.575364 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21523 vulnerable 2026-06-08 07:08:56.566712 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21522 vulnerable 2026-06-08 07:08:56.566294 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21520 vulnerable 2026-06-08 07:08:56.565378 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21519 vulnerable 2026-06-08 07:08:56.564882 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21518 vulnerable 2026-06-08 07:08:56.563532 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21505 vulnerable 2026-06-08 07:08:56.549730 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21503 vulnerable 2026-06-08 07:08:56.548801 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21501 vulnerable 2026-06-08 07:08:56.521297 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21500 vulnerable 2026-06-08 07:08:56.520962 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21497 vulnerable 2026-06-08 07:08:56.518342 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21491 vulnerable 2026-06-08 07:08:56.504698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21490 vulnerable 2026-06-08 07:08:56.501421 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.