Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data. CVSS 3.1 Base Score 4.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N).
CVSS Details
- CVSS 3.1 Base Score: 4.9
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade mecabUpgrade mysql-commonUpgrade mysqlUpgrade mysql-serverUpgrade mysql-develUpgrade mecab-ipadic-EUCJPUpgrade rapidjson-docUpgrade mysql-testUpgrade rapidjson-develUpgrade mecab-ipadicUpgrade mysql-libsUpgrade mysql-test-dataUpgrade mecab-develUpgrade mysql-errmsg | Sep 19, 2025 | Sep 17, 2025 |
| Oracle Mysql | — | Upgrade to MySQL version 9.4.0Upgrade to MySQL version 8.4.6Upgrade to MySQL version 8.0.43 | Jul 16, 2025 | Jul 15, 2025 |
| Oracle_linux | — | Upgrade mysql8.4-testUpgrade mysql-serverUpgrade mysql8.4-libsUpgrade mecabUpgrade mecab-develUpgrade mysql-test-dataUpgrade mysql-develUpgrade mysql-selinuxUpgrade mecab-ipadic-EUCJPUpgrade mysql8.4Upgrade mysql8.4-commonUpgrade mysql8.4-serverUpgrade mysql8.4-errmsgUpgrade mysql8.4-test-dataUpgrade mysqlUpgrade mysql8.4-develUpgrade mysql-libsUpgrade rapidjson-develUpgrade mysql-testUpgrade mysql-commonUpgrade mecab-ipadicUpgrade mysql-errmsgUpgrade rapidjson-doc | Sep 15, 2025 | Jul 15, 2025 |
| Redhat_linux | — | Upgrade mysql-test-debuginfoUpgrade mecab-ipadic-EUCJPUpgrade mysql-devel-debuginfoUpgrade mysql8.4-libsUpgrade mysql8.4-serverUpgrade mysql-libs-debuginfoUpgrade mysql-test-dataUpgrade mysql8.4-test-dataUpgrade mysql-serverUpgrade rapidjson-develUpgrade mysql-server-debuginfoUpgrade mysql-libsUpgrade mysql-develUpgrade mysql8.4-commonUpgrade mysql8.4-testUpgrade mysql8.4-errmsgUpgrade mecab-debugsourceUpgrade mecab-develUpgrade rapidjson-docUpgrade mysql8.4-debugsourceUpgrade mysql-selinuxUpgrade mecab-debuginfoUpgrade mecabUpgrade mysql8.4-libs-debuginfoUpgrade mecab-ipadicUpgrade mysql8.4-server-debuginfoUpgrade mysql8.4Upgrade mysqlUpgrade mysql8.4-devel-debuginfoUpgrade mysql8.4-develUpgrade mysql8.4-debuginfoUpgrade mysql-testUpgrade mysql-commonUpgrade mysql8.4-test-debuginfoUpgrade mysql-debugsourceUpgrade mysql-debuginfoUpgrade mysql-errmsg | Jul 18, 2025 | Jul 15, 2025 |
| Rocky_linux | — | Upgrade mysql8.4-server-debuginfoUpgrade mysql-test-debuginfoUpgrade mysql-develUpgrade mysql-debuginfoUpgrade mysql8.4-test-debuginfoUpgrade mysql-serverUpgrade mysql8.4-develUpgrade mysql8.4-libsUpgrade mecab-debuginfoUpgrade mysql8.4-libs-debuginfoUpgrade mecab-develUpgrade mecab-ipadic-EUCJPUpgrade mysql8.4-serverUpgrade mysql-libs-debuginfoUpgrade mysql-errmsgUpgrade mysql8.4-devel-debuginfoUpgrade mysql-libsUpgrade mysql-common | Feb 5, 2026 | Dec 2, 2025 |
| Ubuntu | — | Upgrade mysql-serverUpgrade mysql-server (Ubuntu Pro)Upgrade mysql-server-8.0Upgrade mysql-server-8.0 (Ubuntu Pro) | Jul 23, 2025 | Jul 15, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Feb 9, 2026 | Jul 15, 2025 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub