CVE-2025-21495

CVSS 3.1 Score 4.4 of 10 (medium)

Details

Published Jan 21, 2025

Summary

CVE-2025-21495 is a vulnerability affecting the MySQL Enterprise Firewall component of Oracle MySQL, specifically versions 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. This issue allows high-privileged attackers with network access to exploit it via multiple protocols, potentially causing a hang or frequent crashes of the MySQL Enterprise Firewall. Successful attacks can result in a Denial of Service (DoS) impact. The CVSS Base Score is 4.4, with a vector of (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share