CVE-2025-21567

CVSS 3.1 Score 4.3 of 10 (medium)

Details

Published Jan 21, 2025

Summary

CVE-2025-21567 is a vulnerability affecting Oracle MySQL Server versions 9.1.0 and prior. This issue lies within the Security: Privileges component and is classified as easily exploitable. A low-privileged attacker with network access can exploit this vulnerability via multiple protocols, potentially leading to unauthorized read access to a subset of the affected MySQL Server's accessible data. The Base Score is 4.3 (Confidentiality impacts), with a CVSS Vector of (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N).

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share