Threats affecting pkg:maven/com.oracle.mysql/mysql-server

CVE-2026-47052 is a medium severity vulnerability in Oracle MySQL Server and MySQL Cluster affecting specific versions. It allows a high privileged attacker with network access via multiple protocols to cause a hang or repeated crash, resulting in a denial of service (DoS). The vulnerability impacts availability but does not affect confidentiality or integrity. Affected versions include MySQL Server 8.4.0 through 8.4.10 and 9.7.0 through 9.7.1, as well as MySQL Cluster 8.0.0 through 8.0.47, 8.4.0 through 8.4.10, and 9.7.0 through 9.7.1. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability or remediation status for these versions. No known exploits are reported in the wild at this time.

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVE-2026-47012 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting certain versions. It allows a high privileged attacker with network access via multiple protocols to cause a hang or repeated crash, resulting in a denial of service (DoS). The vulnerability is difficult to exploit and impacts availability without compromising confidentiality or integrity. The affected versions include MySQL Server 8.4.0 through 8.4.10 and 9.7.0 through 9.7.1, as well as MySQL Cluster 8.0.0 through 8.0.47, 8.4.0 through 8.4.10, and 9.7.0 through 9.7.1. The CVSS 3.1 base score is 4.4, indicating medium severity. Oracle has published a Critical Patch Update advisory including this vulnerability but does not explicitly confirm patch availability for these versions in the provided data.

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVE-2026-60311 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting versions 9.0.0 through 9.7.1. It allows a low privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 6.5, indicating a medium severity. Oracle has published a Critical Patch Update advisory referencing this vulnerability but does not explicitly confirm patch availability or remediation status for these versions. No known exploits in the wild have been reported.

CVE-2026-60194 is a vulnerability in Oracle MySQL Server and MySQL Cluster versions 9.7.0 through 9.7.1 affecting the Server: JSON Duality component. It allows a high privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the server. The vulnerability has a CVSS 3.1 base score of 4.9, indicating a medium severity primarily impacting availability. No official patch or remediation level has been explicitly stated in the vendor advisory as of the publication date. Oracle recommends applying security patches promptly from their Critical Patch Update advisories. No known exploits in the wild have been reported.

CVE-2026-60174 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting versions 9.7.0 through 9.7.1. It allows a low privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 6.5, indicating a medium severity. Oracle has included this vulnerability in its July 2026 Critical Patch Update advisory but has not explicitly stated patch availability for these versions yet.

CVE-2026-35240 is a medium severity vulnerability in Oracle MySQL Server affecting versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.

CVE-2026-35239 is a vulnerability in Oracle MySQL Server affecting versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.

CVE-2026-35237 is a vulnerability in Oracle MySQL Server affecting versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.

CVE-2026-35234 is a vulnerability in Oracle MySQL Server versions 9.0.0 through 9.6.0 affecting the Server: Partition component. It allows a high privileged attacker with network access via multiple protocols to cause a denial of service by hanging or repeatedly crashing the MySQL Server. The vulnerability has a CVSS 3.1 base score of 4.9, indicating a medium severity with impact limited to availability. Oracle has included this vulnerability in its April 2026 Critical Patch Update advisory, which addresses numerous security issues across Oracle products.

CVE-2026-34304 is a medium severity vulnerability in Oracle MySQL Server affecting versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.

CVE-2026-34278 is a medium severity vulnerability in Oracle MySQL Server versions 8.0.0 through 8.0.45 affecting the Server Optimizer component. It allows a high privileged attacker with network access via multiple protocols to cause a denial of service by hanging or repeatedly crashing the MySQL Server. The vulnerability impacts availability but does not affect confidentiality or integrity. Oracle has included this vulnerability in its April 2026 Critical Patch Update advisory, which provides cumulative patches addressing this and other vulnerabilities. Users are strongly advised to apply the April 2026 Critical Patch Update to remediate this issue.

CVE-2026-34276 is a vulnerability in Oracle MySQL Server affecting versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.

CVE-2026-34272 is a vulnerability in Oracle MySQL Server versions 9.0.0 through 9.6.0 affecting the Server Optimizer component. It allows a low privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the MySQL Server. The vulnerability has a CVSS 3.1 base score of 6.5, indicating a medium severity with impact on availability only. Oracle has included this vulnerability in its April 2026 Critical Patch Update advisory, which provides patches addressing this and many other vulnerabilities.

CVE-2026-34270 is a vulnerability in Oracle MySQL Server's Group Replication Plugin affecting versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.

CVE-2026-34267 is a vulnerability in Oracle MySQL Server versions 8.0.0 through 8.0.45 affecting the Server Optimizer component. It allows a high privileged attacker with network access via multiple protocols to cause a hang or repeated crash of the MySQL Server, resulting in a denial of service (DoS). The vulnerability has a CVSS 3.1 base score of 4.9, indicating a medium severity focused on availability impact. Oracle has included this vulnerability in its April 2026 Critical Patch Update, which provides security patches addressing this and other vulnerabilities.

CVE-2026-22015 is a medium severity vulnerability in Oracle MySQL Server affecting versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.

CVE-2026-22005 is a vulnerability in Oracle MySQL Server affecting versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.

CVE-2026-22002 is a medium severity vulnerability in Oracle MySQL Server affecting versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.