Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Cluster executes to compromise MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.7 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H).
References
| Link | Resource |
|---|---|
| https://www.oracle.com/security-alerts/cpujul2025.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
24 Jul 2025, 21:27
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Oracle mysql Cluster
Oracle |
|
| CWE | NVD-CWE-noinfo | |
| References | () https://www.oracle.com/security-alerts/cpujul2025.html - Patch, Vendor Advisory | |
| CPE | cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:* |
16 Jul 2025, 14:58
| Type | Values Removed | Values Added |
|---|---|---|
| Summary |
|
15 Jul 2025, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-07-15 20:15
Updated : 2025-07-24 21:27
NVD link : CVE-2025-50068
Mitre link : CVE-2025-50068
CVE.ORG link : CVE-2025-50068
JSON object : View
Products Affected
oracle
- mysql_cluster
CWE