CVE-2025-21580

CVSS 3.1 Score 4.9 of 10 (medium)

Details

Published Apr 15, 2025
Updated: Apr 17, 2025
CWE ID 732

Summary

CVE-2025-21580 is a vulnerability affecting the Oracle MySQL Server, specifically versions 8.0.0-8.0.41, 8.4.0-8.4.4, and 9.0.0-9.2.0 (Component: Server, DML). A high privileged attacker with network access can exploit this easily exploitable issue via multiple protocols, leading to a hang or frequent crash of the MySQL Server, resulting in a Denial of Service (Availability impacts). The Base Score of CVSS 3.1 for this vulnerability is 4.9. The attack vector is (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Oracle MySQL Server
  • MySQL

Affected Vendors

  • Oracle

Advisories, Assessments, and Mitigations