Home/Product/oracle mysql connectors
Product

oracle mysql connectors

17 known vulnerabilities across versions
Vulnerabilities are listed by affected version. Select any CVE for the full briefing and its intelligence graph.
CVE-2025-30714
>= 9.0.0 and <= 9.2.0
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that are affected
4.8MEDIUM
CVE-2025-30706
>= 9.0.0 and <= 9.2.0
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are
7.5HIGH
CVE-2023-21971
>= 8.0.0 and <= 8.0.32
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are
5.3MEDIUM
CVE-2022-21824
<= 8.0.28
Due to the formatting logic of the "console.table()" function it was not safe to allow user controlled input to be passed to the "
8.2HIGH
CVE-2021-44533
<= 8.0.28
Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 did not handle multi-value Relative Distinguished Names correctly. Attackers
5.3MEDIUM
CVE-2021-44532
<= 8.0.28
Node.js < 12.22.9, < 14.18.3, < 16.13.2, and < 17.3.1 converts SANs (Subject Alternative Names) to a string format. It uses this s
5.3MEDIUM
CVE-2021-44531
<= 8.0.28
Accepting arbitrary Subject Alternative Name (SAN) types, unless a PKI is specifically defined to use a particular SAN type, can r
7.4HIGH
CVE-2022-21363
>= 8.0.0 and <= 8.0.27
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8
6.6MEDIUM
CVE-2021-2471
>= 8.0.0 and <= 8.0.26
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8
5.9MEDIUM
CVE-2021-3712
<= 8.0.27
ASN.1 strings are represented internally within OpenSSL as an ASN1_STRING structure which contains a buffer holding the string dat
7.4HIGH
CVE-2021-3711
<= 8.0.27
In order to decrypt SM2 encrypted data an application is expected to call the API function EVP_PKEY_decrypt(). Typically an applic
9.8CRITICAL
CVE-2021-3450
<= 8.0.23
The X509_V_FLAG_X509_STRICT flag enables additional security checks of the certificates present in a certificate chain. It is not
7.4HIGH
CVE-2021-3449
<= 8.0.23
An OpenSSL TLS server may crash if sent a maliciously crafted renegotiation ClientHello message from a client. If a TLSv1.2 renego
5.9MEDIUM
CVE-2020-1967
<= 8.0.20
Server or client applications that call the SSL_check_chain() function during or after a TLS 1.3 handshake may crash due to a NULL
7.5HIGH
CVE-2019-10219
< 8.0.27
A vulnerability was found in Hibernate-Validator. The SafeHtml validator annotation fails to properly sanitize payloads consisting
6.1MEDIUM
CVE-2019-2435
>= 2.1.0 and <= 2.1.8
Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/Python). Supported versions that are affe
8.1HIGH
CVE-2017-3586
<= 5.1.41
Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected
6.4MEDIUM
Vulnerabilities
CISA KEV catalog
CWE weaknesses
CAPEC attack patterns
Package vulnerabilities
Threat intelligence
Threat actors
Tools & malware
ATT&CK techniques
IOCs
Detection & defense
Sigma rules
YARA rules
Atomic Red Team tests
D3FEND countermeasures
Compliance
NIST 800-53
ISO 27001:2022
SOC 2 TSC
PCI-DSS v4.0
CIS Controls v8.1
About
All capabilities
Live statistics
Data sources
Privacy policy
Terms of service
threatengine.sh  ·  Open-source threat intelligence platform  ·  100+ authoritative sources  ·  Every fact traces to its origin