CVE-2025-21588
CVSS 3.1 Score 4.9 of 10 (medium)
Details
Published Apr 15, 2025
Updated: Apr 19, 2025
CWE ID 284
Summary
CVE-2025-21588 is a newly identified vulnerability affecting Oracle MySQL Server versions 8.4.0-8.4.4 and 9.0.0-9.2.0. This issue, located within the DML component, is classified as easily exploitable and can be exploited by high privileged attackers with network access. Successful attacks may result in a denial-of-service condition, leading to a hang or frequent crashes of the MySQL Server. The vulnerability holds a CVSS Base Score of 4.9, with a CVSS Vector of (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Oracle MySQL Server
- MySQL
Affected Vendors
- Oracle