CVE-2025-21494
CVSS 3.1 Score 4.1 of 10 (medium)
Details
Published Jan 21, 2025
Summary
CVE-2025-21494 is a vulnerability affecting Oracle MySQL Server versions 8.0.39 and prior, 8.4.2 and prior, and 9.0.1 and prior. This issue, classified as difficult to exploit, enables a high privileged attacker with access to the underlying infrastructure to compromise the MySQL Server. Consequences of successful exploitation can lead to a hang or frequent crashes, causing a Denial of Service (DoS) impact. The Base Score according to the CVSS 3.1 metric is 4.1. The CVSS Vector is (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- MySQL