DNA View

CVE-2025-21548

Medium
Low Medium High Critical
6.4
CVSS Score
Published: Jan 21, 2025
Last Modified: Jun 18, 2025

Vulnerability Description

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that are affected are 9.1.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Connectors accessible data as well as unauthorized read access to a subset of MySQL Connectors accessible data and unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Connectors. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:H).

CVSS Metrics

Common Vulnerability Scoring System

Vector String:

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:H/A:H
Attack Vector
N
Attack Complexity
L
Privileges Required
H
User Interaction
R
Scope
U
Confidentiality
L
Integrity
H
Availability
H

Known Affected Software

51 configuration(s) from 1 vendor(s)

mysql_connector\/python
Version:
8.0.0
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.0:*:*:*:*:*:*:*
mysql_connector\/python
Version:
9.1.0
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:9.1.0:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.12
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.12:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.17
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.17:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.33
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.33:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.22
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.22:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.14
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.14:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.15
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.15:*:*:*:*:*:*:*
mysql_connector\/python
Version:
2.0.3
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:2.0.3:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.4
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.4:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.32
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.32:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.5
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.5:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.30
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.30:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.1.0
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.1.0:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.2.0
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.2.0:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.3.0
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.3.0:*:*:*:*:*:*:*
mysql_connector\/python
Version:
2.0.0
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:2.0.0:*:*:*:*:*:*:*
mysql_connector\/python
Version:
2.1.2
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:2.1.2:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.29
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.29:*:*:*:*:*:*:*
mysql_connector\/python
Version:
2.1.6
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:2.1.6:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.27
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.27:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.31
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.31:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.23
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.23:*:*:*:*:*:*:*
mysql_connector\/python
Version:
2.0.4
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:2.0.4:*:*:*:*:*:*:*
mysql_connector\/python
Version:
2.2.2
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:2.2.2:*:*:*:*:*:*:*
mysql_connector\/python
Version:
2.0.5
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:2.0.5:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.19
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.19:*:*:*:*:*:*:*
mysql_connector\/python
Version:
2.0.2
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:2.0.2:*:*:*:*:*:*:*
mysql_connector\/python
Version:
2.1.0
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:2.1.0:*:*:*:*:*:*:*
mysql_connector\/python
Version:
2.2.1
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:2.2.1:m2:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.21
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.21:*:*:*:*:*:*:*
mysql_connector\/python
Version:
2.2.3
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:2.2.3:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.25
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.25:*:*:*:*:*:*:*
mysql_connector\/python
Version:
2.0.1
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:2.0.1:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.26
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.26:*:*:*:*:*:*:*
mysql_connector\/python
Version:
2.1.7
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:2.1.7:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.16
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.16:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.20
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.20:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.11
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.11:*:*:*:*:*:*:*
mysql_connector\/python
Version:
2.2.0
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:2.2.0:*:*:*:*:*:*:*
mysql_connector\/python
Version:
2.1.5
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:2.1.5:*:*:*:*:*:*:*
mysql_connector\/python
Version:
2.1.4
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:2.1.4:*:*:*:*:*:*:*
mysql_connector\/python
Version:
9.0.0
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:9.0.0:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.4.0
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.4.0:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.28
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.28:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.13
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.13:*:*:*:*:*:*:*
mysql_connector\/python
Version:
2.1.3
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:2.1.3:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.18
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.18:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.24
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.24:*:*:*:*:*:*:*
mysql_connector\/python
Version:
2.1.1
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:2.1.1:*:*:*:*:*:*:*
mysql_connector\/python
Version:
8.0.6
CPE:
cpe:2.3:a:oracle:mysql_connector\/python:8.0.6:*:*:*:*:*:*:*
This vulnerability affects 51 software configuration(s). Ensure you patch all affected systems.

Available Security Patches

1 patch available from vendors

View All Patches
Oracle

CPUJAN2025

Oracle Critical Patch Update Advisory - January 2025

Severity
Critical
Released
Jan 21, 2025
Restart Required
Security Update

Severity Details

6.4
out of 10.0
Medium

Weakness Type (CWE)

CWE-400

Uncontrolled Resource Consumption

Description
The product does not properly control the allocation and maintenance of a limited resource.
Exploit Likelihood
High
Typical Severity
High
Abstraction Level
Class

Key Information

Published Date
January 21, 2025