CVE-2025-21519
CVSS 3.1 Score 4.4 of 10 (medium)
Details
Published Jan 21, 2025
Updated: Jan 22, 2025
CWE ID 863
Summary
CVE-2025-21519 is a vulnerability affecting Oracle MySQL Server versions 8.0.40 and prior, 8.4.3 and prior, and 9.1.0 and prior. This issue, located in the Server: Security: Privileges component, enables a high privileged attacker with network access to induce a denial-of-service condition on MySQL Server via multiple protocols. Successfully exploited attacks can result in frequent crashes or a complete hang of MySQL Server, leading to significant availability impacts. The CVSS Base Score is 4.4. (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H)
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- MySQL