Threats affecting pkg:maven/com.oracle.mysql/mysql-server

113 threats

Severity	CVSS	Signals	Threat	Source	Published
Low	2.2	EPSS 0.4%	CVE-2025-50100Oracle MySQL Server · Uncontrolled Resource Consumption Low2.2EPSS 0.4%2025-07-15CVE Database V5CVE-2025-50100 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Thread Pooling). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.2 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:L). EPSS 0.4%Vulnerability CWE-400	CVE Database V5	2025-07-15
Low	2.7	EPSS 0.5%	CVE-2025-50098Oracle MySQL Server · Uncontrolled Resource Consumption Low2.7EPSS 0.5%2025-07-15CVE Database V5CVE-2025-50098 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Server. CVSS 3.1 Base Score 2.7 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L). EPSS 0.5%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	4.9	EPSS 0.6%	CVE-2025-50095Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.6%2025-07-15CVE Database V5CVE-2025-50095 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.6%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	4.9	EPSS 0.6%	CVE-2025-50094Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.6%2025-07-15CVE Database V5CVE-2025-50094 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 8.0.42, 8.4.5 and 9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.6%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	4.9	EPSS 0.7%	CVE-2025-50092Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.7%2025-07-15CVE Database V5CVE-2025-50092 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.7%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	4.9	EPSS 0.7%	CVE-2025-50091Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.7%2025-07-15CVE Database V5CVE-2025-50091 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.7%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	4.9	EPSS 0.7%	CVE-2025-50089Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.7%2025-07-15CVE Database V5CVE-2025-50089 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 9.0.0-9.1.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.7%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	4.9	EPSS 0.7%	CVE-2025-50088Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.7%2025-07-15CVE Database V5CVE-2025-50088 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.7%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	4.9	EPSS 0.6%	CVE-2025-50086Oracle MySQL Server · Incorrect Authorization Medium4.9EPSS 0.6%2025-07-15CVE Database V5CVE-2025-50086 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.6%Vulnerability CWE-863	CVE Database V5	2025-07-15
Medium	5.5	EPSS 0.5%	CVE-2025-50085Oracle MySQL Server · Incorrect Authorization Medium5.5EPSS 0.5%2025-07-15CVE Database V5CVE-2025-50085 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server as well as unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 5.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H). EPSS 0.5%Vulnerability CWE-863	CVE Database V5	2025-07-15
Medium	4.9	EPSS 0.6%	CVE-2025-50084Oracle MySQL Server · Incorrect Authorization Medium4.9EPSS 0.6%2025-07-15CVE Database V5CVE-2025-50084 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.6%Vulnerability CWE-863	CVE Database V5	2025-07-15
Medium	6.5	EPSS 0.7%	CVE-2025-50083Oracle MySQL Server · Uncontrolled Resource Consumption Medium6.5EPSS 0.7%2025-07-15CVE Database V5CVE-2025-50083 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). EPSS 0.7%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	6.5	EPSS 0.7%	CVE-2025-50082Oracle MySQL Server · Uncontrolled Resource Consumption Medium6.5EPSS 0.7%2025-07-15CVE Database V5CVE-2025-50082 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). EPSS 0.7%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	4.9	EPSS 0.7%	CVE-2025-50079Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 0.7%2025-07-15CVE Database V5CVE-2025-50079 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.7%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	6.5	EPSS 0.6%	CVE-2025-50076Oracle MySQL Server · Uncontrolled Resource Consumption Medium6.5EPSS 0.6%2025-07-15CVE Database V5CVE-2025-50076 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affected are 8.0.0-8.0.25. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H). EPSS 0.6%Vulnerability CWE-400	CVE Database V5	2025-07-15
Medium	4.0	EPSS 0.2%	CVE-2025-30721Oracle MySQL Server · Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure Medium4.0EPSS 0.2%2025-04-15CVE Database V5CVE-2025-30721 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: UDF). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.0 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:U/C:N/I:N/A:H). EPSS 0.2%Vulnerability	CVE Database V5	2025-04-15
Medium	4.9	EPSS 1.0%	CVE-2025-30715Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.9EPSS 1.0%2025-04-15CVE Database V5CVE-2025-30715 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 1.0%Vulnerability CWE-400	CVE Database V5	2025-04-15
Medium	4.4	EPSS 0.8%	CVE-2025-30704Oracle MySQL Server · Uncontrolled Resource Consumption Medium4.4EPSS 0.8%2025-04-15CVE Database V5CVE-2025-30704 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.8%Vulnerability CWE-400	CVE Database V5	2025-04-15
Low	2.7	EPSS 0.6%	CVE-2025-30703Oracle MySQL Server · Incorrect Authorization Low2.7EPSS 0.6%2025-04-15CVE Database V5CVE-2025-30703 Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N). EPSS 0.6%Vulnerability CWE-863	CVE Database V5	2025-04-15
Medium	4.9	EPSS 0.9%	CVE-2025-30699Oracle MySQL Server · Improper Access Control Medium4.9EPSS 0.9%2025-04-15CVE Database V5CVE-2025-30699 Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Stored Procedure). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H). EPSS 0.9%Vulnerability CWE-284	CVE Database V5	2025-04-15

Page 4 of 6