MySQL Connectors Vulnerability in Oracle's Connector/Python Affects Security
CVE-2025-30714

4.8MEDIUM

Key Information:

Vendor
Oracle
Status
Mysql Connectors
Vendor
CVE Published:
15 April 2025

Summary

A security issue has been identified in Oracle MySQL's Connector/Python, affecting versions 9.0.0 to 9.2.0. This vulnerability allows an attacker with low privileges network access to exploit the MySQL Connectors. Exploitation requires human interaction from an unassociated individual, which may lead to unauthorized access to sensitive data within the MySQL Connectors. It poses a potential risk to data confidentiality, making it imperative for users to apply necessary security measures.

Affected Version(s)

MySQL Connectors 9.0.0 <= 9.2.0

References

https://www.oracle.com/security-alerts/cpuapr2025.html
vendor-advisory

CVSS V3.1

Score:
4.8
Severity:
MEDIUM
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.