CVE-2025-30688

CVSS 3.1 Score 6.5 of 10 (medium)

Details

Published Apr 15, 2025
Updated: Apr 21, 2025
CWE ID 732

Summary

CVE-2025-30688 is a vulnerability affecting the Optimizer component in Oracle MySQL Server versions 8.0.0-8.0.41, 8.4.0-8.4.4, and 9.0.0-9.2.0. A low-privileged network attacker can exploit this easily exploitable issue, leading to a hang or frequent crashes of the MySQL Server, resulting in a Denial of Service (DoS) attack. The Base Score of CVSS 3.1 for this vulnerability is 6.5, indicating a medium-level threat to availability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Oracle MySQL Server
  • MySQL

Affected Vendors

  • Oracle

Advisories, Assessments, and Mitigations