CVE search · CVE-2025-21492
CVE-2025-21492
medium 4.9
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.36 and prior and 8.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Details
- Status
- Analyzed
- Published
- Last changed
- Source
- secalert_us@oracle.com
- Weakness
- CWE-770
Severity
| Version | Score | Vector | Source |
|---|---|---|---|
| CVSS 3.1 | medium 4.9 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H |
secalert_us@oracle.comSecondary |
Affected products
Vendor and product from the NVD’s CPE applicability statements. Versions and conditions are on the NVD’s page.
- oracle · mysql_server
- netapp · active_iq_unified_manager
- netapp · oncommand_insight
- netapp · oncommand_workflow_automation
References
- https://www.oracle.com/security-alerts/cpujan2025.htmlVendor Advisory
- https://security.netapp.com/advisory/ntap-20250124-0011/Third Party Advisory