CVE-2025-30706: High severity Oracle MySQL Connectors vulnerability
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in takeover of MySQL Connectors. CVSS 3.1 Base Score 7.5 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle MySQL (component: Connector/J)to a version that resolves this vulnerability.Fixed in 9.2.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30706?
CVE-2025-30706 has been classified as a low severity vulnerability.
How do I fix CVE-2025-30706?
To mitigate CVE-2025-30706, users should upgrade their MySQL Connectors to versions beyond 9.2.0.
What versions are affected by CVE-2025-30706?
CVE-2025-30706 affects Oracle MySQL Connectors versions 9.0.0 to 9.2.0.
Who is affected by CVE-2025-30706?
Any user of the affected versions of Oracle MySQL Connectors with network access is at risk from CVE-2025-30706.
Can CVE-2025-30706 be exploited remotely?
Yes, CVE-2025-30706 can be exploited remotely by a low privileged attacker with network access.