Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 9.7.0-9.7.3; MySQL Cluster: 9.7.0-9.7.3. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: InnoDB). Supported versions that are affected are MySQL Server: 8.4.0-8.4.12, 9.7.0-9.7.3, 26.7.0-26.7.1; MySQL Cluster: 8.0.0-8.0.49, 8.4.0-8.4.12, 9.7.0-9.7.3 and 26.7.0-26.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).
CVE-2026-101617 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access via multiple protocols to cause a hang or repeated crash, resulting in a denial of service (DoS). The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating medium severity. Oracle has released patches addressing this vulnerability as part of their October 2026 Critical Patch Update.
CVE-2026-101616 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a low privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. Oracle has released security patches addressing this issue in their October 2026 Critical Patch Update.
CVE-2026-101615 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting specific versions of the InnoDB component. It allows a high privileged attacker with logon access to cause a hang or repeated crash, resulting in a denial of service (DoS). The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.4, indicating medium severity. Oracle has released patches addressing this vulnerability in their October 2026 Critical Patch Update.
CVE-2026-101614 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating medium severity. Oracle has released security patches addressing this issue as part of their October 2026 Critical Patch Update.
CVE-2026-101613 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating a medium severity. Oracle has released security patches addressing this issue as part of their October 2026 Critical Patch Update.
CVE-2026-101612 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with logon access to the infrastructure to cause a denial of service (DoS) by hanging or crashing the MySQL Server or Cluster. Exploitation requires human interaction from a person other than the attacker. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.0, indicating medium severity.
CVE-2026-101611 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access via multiple protocols to cause a hang or frequent crash, resulting in a denial of service (DoS). The vulnerability is difficult to exploit and does not impact confidentiality or integrity. The CVSS 3.1 base score is 4.4, indicating medium severity. Oracle has released security patches addressing this vulnerability as part of their October 2026 Critical Patch Update.
CVE-2026-101610 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating medium severity. Oracle has released patches for this vulnerability as part of their October 2026 Critical Patch Update.
CVE-2026-101609 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access via multiple protocols to cause a hang or frequent crash, resulting in a denial of service (DoS). The vulnerability is difficult to exploit and impacts availability without compromising confidentiality or integrity. Oracle has released patches addressing this issue in their October 2026 Critical Patch Update.
CVE-2026-101608 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a low privileged attacker with network access via multiple protocols to cause a denial of service by hanging or repeatedly crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 6.5, indicating a medium severity. Oracle has released security patches addressing this issue as part of their October 2026 Critical Patch Update.
CVE-2026-101607 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting multiple versions. It allows a high privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.9, indicating medium severity. Oracle has released security patches addressing this vulnerability as part of their October 2026 Critical Patch Update.
CVE-2026-101606 is a vulnerability in Oracle Communications Billing and Revenue Management (BRM) versions 15.0.0.0.0, 15.0.1.0.0, 15.1.0.0.0, and 15.2.0.0.0. It allows an unauthenticated attacker with network access via TLS to perform unauthorized read and write operations on accessible data. The vulnerability has a CVSS 3.1 base score of 6.5, indicating medium severity, with impacts on confidentiality and integrity but no impact on availability. Oracle has released a Critical Patch Update that addresses this and many other vulnerabilities, and customers are strongly advised to apply the patches promptly.
CVE-2026-101605 is a medium severity vulnerability in Oracle Utilities Network Management System allowing an unauthenticated attacker with network access via HTTPS to gain unauthorized read access to some accessible data. The vulnerability affects multiple specific versions of the product. The CVSS 3.1 base score is 5.3, indicating a confidentiality impact without integrity or availability impact. Oracle has published a Critical Patch Update advisory including patches for this and other vulnerabilities.
CVE-2026-101604 is a high-severity vulnerability in Oracle Communications Unified Inventory Management versions 7.5.0, 7.5.1, 7.6.0, 7.7.0, 7.8.0, and 8.0.1. It allows an unauthenticated attacker with network access via HTTP to gain unauthorized access to critical data or potentially all accessible data within the product. The vulnerability has a CVSS 3.1 base score of 7.5, indicating a significant confidentiality impact without requiring privileges or user interaction.