Severity Flaw in Oracle MySQL Server Exposes System to Potential Disruption
CVE-2025-21525
4.9MEDIUM
Summary
A vulnerability in the Oracle MySQL Server allows an attacker with high-level privileges and network access to exploit multiple protocols, resulting in unauthorized access. Successful exploitation can cause the server to hang or crash repeatedly, leading to a denial of service. This poses significant operational risks, particularly for businesses relying heavily on their databases.
Affected Version(s)
MySQL Server * <= 8.0.39
MySQL Server * <= 8.4.2
MySQL Server * <= 9.0.1
References
CVSS V3.1
Score:
4.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published
Vulnerability Reserved