PT-2025-16437

CVE-2025-30703

·

Published

2025-04-15

·

Updated

2025-09-30

Description by

CVSS 3.1
6.5
Medium
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Name of the Vulnerable Software and Affected Versions MySQL Server versions 8.0.0 through 8.0.41 MySQL Server versions 8.4.0 through 8.4.4 MySQL Server versions 9.0.0 through 9.2.0
Description The issue allows a high-privileged attacker with network access via multiple protocols to compromise the MySQL Server, resulting in unauthorized update, insert, or delete access to some of the MySQL Server's accessible data.
Recommendations For versions 8.0.0 through 8.0.41, update to a version outside of this range to resolve the issue. For versions 8.4.0 through 8.4.4, update to a version outside of this range to resolve the issue. For versions 9.0.0 through 9.2.0, update to a version outside of this range to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
ALSA-2025:15699
ALSA-2025:16046
ALSA-2025:16086
ALSA-2025:16861
ALT-PU-2025-7012
ALT-PU-2025-7414
AZL-62074
AZL-62144
CESA-2025_16861
INFSA-2025_16046
INFSA-2025_16086
INFSA-2025_16861
OESA-2025-1454
RHSA-2025_16046
RHSA-2025_16086
RHSA-2025:16861
RHSA-2025_16861
USN-7479-1
Found an issue in the description? Have something to add? Feel free to write us 👾