Approved changes feed: RSS · Atom

cpe:2.3:a:oracle:mysql_server:9.1.0_and_prior:*:*:*:*:*:*:*

part: a version: 9.1.0_and_prior update: *

VendorOracle (3509f9eb-d8a0-57da-b153-b8021021b133)
ProductMysql Server (37692947-b700-5945-bf8e-fc7c3b3c5af2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-21567 vulnerable 2026-06-08 07:08:56.633331 Details available
MEDIUM (4.3)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 4.3 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).
Published: 2025-01-21T20:53:22.751Z
Updated: 2025-11-03T20:58:09.398Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21566 vulnerable 2026-06-08 07:08:56.632950 Details available
MEDIUM (6.5)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.1.0 and prior. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Published: 2025-01-21T20:53:22.396Z
Updated: 2025-11-03T20:58:07.985Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21559 vulnerable 2026-06-08 07:08:56.628485 Details available
MEDIUM (5.5)
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
Published: 2025-01-21T20:53:19.677Z
Updated: 2025-11-03T20:58:06.517Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21555 vulnerable 2026-06-08 07:08:56.621242 Details available
MEDIUM (5.5)
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H).
Published: 2025-01-21T20:53:18.135Z
Updated: 2025-11-03T20:58:05.076Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21546 vulnerable 2026-06-08 07:08:56.598532 Details available
LOW (3.8)
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: Privileges). Supported versions that are affected are 8.0.40 and prior, 8.4.3 and prior and 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data as well as unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).
Published: 2025-01-21T20:53:14.687Z
Updated: 2025-11-03T20:58:03.540Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21543 vulnerable 2026-06-08 07:08:56.597599 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21540 vulnerable 2026-06-08 07:08:56.591525 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21531 vulnerable 2026-06-08 07:08:56.579483 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21529 vulnerable 2026-06-08 07:08:56.575414 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21523 vulnerable 2026-06-08 07:08:56.566854 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21522 vulnerable 2026-06-08 07:08:56.566340 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21520 vulnerable 2026-06-08 07:08:56.565411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21519 vulnerable 2026-06-08 07:08:56.564942 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21518 vulnerable 2026-06-08 07:08:56.563578 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21505 vulnerable 2026-06-08 07:08:56.549779 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21503 vulnerable 2026-06-08 07:08:56.548866 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21501 vulnerable 2026-06-08 07:08:56.521347 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21500 vulnerable 2026-06-08 07:08:56.521019 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21499 vulnerable 2026-06-08 07:08:56.520663 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21497 vulnerable 2026-06-08 07:08:56.518504 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21493 vulnerable 2026-06-08 07:08:56.510828 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21491 vulnerable 2026-06-08 07:08:56.504757 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-21490 vulnerable 2026-06-08 07:08:56.502742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.