CVE-2025-21575
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 15, 2025
Updated: Apr 17, 2025
CWE ID 400
Summary
CVE-2025-21575 is a vulnerability affecting MySQL Server versions 8.0.0-8.0.41, 8.4.0-8.4.4, and 9.0.0-9.2.0. This issue, located in the parser component, is classified as easily exploitable and allows a low-privileged attacker with network access to cause a hang or frequently repeatable crash, resulting in a denial-of-service (DoS) situation for the MySQL Server. The Base Score is 6.5, with a CVSS vector of (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Oracle Mysql Cluster
- Oracle MySQL Server
- MySQL
Affected Vendors
- Oracle