Threats affecting pkg:maven/com.oracle/mysql-server

93 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	4.9	EPSS 0.6%	CVE-2025-53040Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.6%2025-10-21CVE Database V5CVE-2025-53040 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.43, 8.4.0-8.4.6 and 9.0.0-9.4.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.6%Vulnerability CWE-400	CVE Database V5	2025-10-21
Medium	4.9	EPSS 0.6%	CVE-2025-53032Oracle MySQL Server · Unthrottled Resource Allocation Medium4.9EPSS 0.6%2025-07-15CVE Database V5CVE-2025-53032 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.6%Vulnerability CWE-770	CVE Database V5	2025-07-15
Medium	4.4	EPSS 0.5%	CVE-2025-50103Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.4EPSS 0.5%2025-07-15CVE Database V5CVE-2025-50103 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Security: LDAP Auth). Supported versions that are affected are 9.0.0-9.3.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.5%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	4.9	EPSS 0.6%	CVE-2025-50102Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.6%2025-07-15CVE Database V5CVE-2025-50102 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.6%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	4.9	EPSS 0.6%	CVE-2025-50101Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.6%2025-07-15CVE Database V5CVE-2025-50101 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.6%Vulnerability CWE-400	CVE Database V5	2025-07-15
Low	2.2	EPSS 0.4%	CVE-2025-50100Oracle MySQL Server · Uncontrolled Resource Consumption Low2.2EPSS 0.4%2025-07-15CVE Database V5CVE-2025-50100 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L). EPSS 0.4%Vulnerability CWE-400	CVE Database V5	2025-07-15
Low	2.7	EPSS 0.5%	CVE-2025-50098Oracle MySQL Server · Uncontrolled Resource Consumption Low2.7EPSS 0.5%2025-07-15CVE Database V5CVE-2025-50098 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L). EPSS 0.5%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	4.9	EPSS 0.6%	CVE-2025-50095Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.6%2025-07-15CVE Database V5CVE-2025-50095 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.6%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	4.9	EPSS 0.6%	CVE-2025-50094Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.6%2025-07-15CVE Database V5CVE-2025-50094 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.42, 8.4.5 and 9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.6%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	4.9	EPSS 0.7%	CVE-2025-50092Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.7%2025-07-15CVE Database V5CVE-2025-50092 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.7%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	4.9	EPSS 0.7%	CVE-2025-50091Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.7%2025-07-15CVE Database V5CVE-2025-50091 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.7%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	4.9	EPSS 0.7%	CVE-2025-50089Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.7%2025-07-15CVE Database V5CVE-2025-50089 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.7%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	4.9	EPSS 0.7%	CVE-2025-50088Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.7%2025-07-15CVE Database V5CVE-2025-50088 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.7%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	5.5	EPSS 0.5%	CVE-2025-50085Oracle MySQL Server · Incorrect Authorization Medium5.5EPSS 0.5%2025-07-15CVE Database V5CVE-2025-50085 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). EPSS 0.5%Vulnerability CWE-863	CVE Database V5	2025-07-15
Medium	4.9	EPSS 0.6%	CVE-2025-50084Oracle MySQL Server · Incorrect Authorization Medium4.9EPSS 0.6%2025-07-15CVE Database V5CVE-2025-50084 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.6%Vulnerability CWE-863	CVE Database V5	2025-07-15
Medium	6.5	EPSS 0.7%	CVE-2025-50082Oracle MySQL Server · Uncontrolled Resource Consumption Medium6.5EPSS 0.7%2025-07-15CVE Database V5CVE-2025-50082 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). EPSS 0.7%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	6.5	EPSS 0.6%	CVE-2025-50076Oracle MySQL Server · Uncontrolled Resource Consumption Medium6.5EPSS 0.6%2025-07-15CVE Database V5CVE-2025-50076 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.25. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). EPSS 0.6%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	4.0	EPSS 0.2%	CVE-2025-30721Oracle MySQL Server · Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure Medium4.0EPSS 0.2%2025-04-15CVE Database V5CVE-2025-30721 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H). EPSS 0.2%Vulnerability	CVE Database V5	2025-04-15
Medium	4.9	EPSS 1.0%	CVE-2025-30715Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 1.0%2025-04-15CVE Database V5CVE-2025-30715 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 1.0%Vulnerability CWE-400	CVE Database V5	2025-04-15
Medium	4.4	EPSS 0.8%	CVE-2025-30704Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.4EPSS 0.8%2025-04-15CVE Database V5CVE-2025-30704 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.8%Vulnerability CWE-400	CVE Database V5	2025-04-15

Page 3 of 5