CVE-2025-30706

Summary

CVE-2025-30706 is a vulnerability affecting Oracle MySQL's Connector/J product, specifically versions 9.0.0 to 9.2.0. This issue permits a low-privileged attacker with network access, using multiple protocols, to gain unauthorized control over MySQL Connectors. With successful exploitation, an attacker can compromise the confidentiality, integrity, and availability of affected systems. The Base Score, according to the Common Vulnerability Scoring System (CVSS), is 7.5. This vulnerability falls under the vectors AV:N (Adjacent Network), AC:H (High attack complexity), PR:L (Low privileges required), UI:N (No user interaction), S:U (User-controlled), C:H (High confidentiality impact), I:H (High integrity impact), and A:H (High availability impact).

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.