MySQL Server Vulnerability Affects Oracle MySQL Products
CVE-2025-21575

6.5MEDIUM

Key Information:

Vendor
Oracle
Status
Mysql Cluster
Mysql Server
Vendor
CVE Published:
15 April 2025

Summary

A vulnerability has been identified in MySQL Server, impacting supported versions of Oracle MySQL. This flaw allows a low-privileged attacker with network access through various protocols to exploit the MySQL Server. Successful exploitation can lead to an unauthorized capability to cause the server to hang or crash, resulting in service disruption. Organizations using affected versions should take immediate action to mitigate potential risks associated with this vulnerability.

Affected Version(s)

MySQL Cluster 7.6.0 <= 7.6.33

MySQL Cluster 8.0.0 <= 8.0.41

MySQL Cluster 8.4.0 <= 8.4.4

References

https://www.oracle.com/security-alerts/cpuapr2025.html
vendor-advisory

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.