Threats affecting pkg:maven/com.mysql/mysql-server

CVE-2026-60190 is a low-severity vulnerability in Oracle MySQL Server and MySQL Cluster affecting specific versions. It allows a high privileged attacker with network access via multiple protocols to cause a partial denial of service (partial DOS). The vulnerability is difficult to exploit and impacts availability without affecting confidentiality or integrity. Affected versions include MySQL Server 8.4.0 through 8.4.10 and 9.7.0 through 9.7.1, as well as MySQL Cluster 8.0.0 through 8.0.47, 8.4.0 through 8.4.10, and 9.7.0 through 9.7.1. Oracle has released a Critical Patch Update advisory covering this vulnerability, but the specific patch status for this CVE is not explicitly confirmed in the advisory. Users should consult the Oracle advisory for the latest patch information and apply updates promptly.

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVE-2026-60184 is a vulnerability in Oracle MySQL Server and MySQL Cluster affecting certain versions. It allows a high privileged attacker with network access via multiple protocols to cause a denial of service by hanging or crashing the server. The vulnerability impacts availability but does not affect confidentiality or integrity. The CVSS 3.1 base score is 4.4, indicating medium severity. Affected versions include MySQL Server 8.4.0 through 8.4.10 and 9.7.0 through 9.7.1, as well as MySQL Cluster 8.0.0 through 8.0.47, 8.4.0 through 8.4.10, and 9.7.0 through 9.7.1. Oracle has released a Critical Patch Update in July 2026 addressing this and many other vulnerabilities. No specific patch link for this CVE was provided, but Oracle strongly recommends applying the available security patches promptly.

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.5 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H).

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).

CVE-2026-35240 is a medium severity vulnerability in Oracle MySQL Server affecting versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.

CVE-2026-34304 is a medium severity vulnerability in Oracle MySQL Server affecting versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.

CVE-2026-34278 is a medium severity vulnerability in Oracle MySQL Server versions 8.0.0 through 8.0.45 affecting the Server Optimizer component. It allows a high privileged attacker with network access via multiple protocols to cause a denial of service by hanging or repeatedly crashing the MySQL Server. The vulnerability impacts availability but does not affect confidentiality or integrity. Oracle has included this vulnerability in its April 2026 Critical Patch Update advisory, which provides cumulative patches addressing this and other vulnerabilities. Users are strongly advised to apply the April 2026 Critical Patch Update to remediate this issue.

CVE-2026-34276 is a vulnerability in Oracle MySQL Server affecting versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.

CVE-2026-22015 is a medium severity vulnerability in Oracle MySQL Server affecting versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.

CVE-2026-21998 is a medium severity vulnerability in Oracle MySQL Server affecting versions 8.0.0 through 8.0.45, 8.4.0 through 8.4.8, and 9.0.

CVE-2026-21964 is a medium severity vulnerability in Oracle MySQL Server affecting versions 8.0.0 through 8.0.44, 8.4.0 through 8.4.7, and 9.0.

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Components Services). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).