First published: Tue Apr 15 2025(Updated: )
Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9.0.0-9.2.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Server accessible data. CVSS 3.1 Base Score 2.7 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N).
Credit: secalert_us@oracle.com
Affected Software | Affected Version | How to fix |
---|---|---|
MySQL | >=8.0.0<=8.0.41>=8.4.0<=8.4.4>=9.0.0<=9.2.0 | |
MySQL | >=8.0.0<=8.0.41 | |
MySQL | >=8.4.0<=8.4.4 | |
MySQL | >=9.0.0<=9.2.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2025-30703 is classified as an easily exploitable vulnerability allowing high privileged attackers to compromise the MySQL Server.
To fix CVE-2025-30703, upgrade to a patched version of MySQL Server that is not affected by this vulnerability.
The vulnerable versions of MySQL Server include 8.0.0 to 8.0.41, 8.4.0 to 8.4.4, and 9.0.0 to 9.2.0.
Yes, CVE-2025-30703 allows an attacker with network access to exploit the vulnerability remotely.
CVE-2025-30703 affects the InnoDB component of the MySQL Server product.