CVE-2025-30714: Medium severity Oracle MySQL Connectors vulnerability
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions that are affected are 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data. CVSS 3.1 Base Score 4.8 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:N/A:N).
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Oracle MySQL (Connector/Python)to a version that resolves this vulnerability.Fixed in 9.0.0-9.2.0
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30714?
CVE-2025-30714 has been classified as a low severity vulnerability.
How do I fix CVE-2025-30714?
To mitigate CVE-2025-30714, upgrade to a version of Oracle MySQL Connectors higher than 9.2.0.
Who is affected by CVE-2025-30714?
CVE-2025-30714 affects users of Oracle MySQL Connectors versions 9.0.0 to 9.2.0.
What type of attack can exploit CVE-2025-30714?
CVE-2025-30714 can be exploited by a low privileged attacker with network access via multiple protocols.
What component is affected by CVE-2025-30714?
CVE-2025-30714 affects the MySQL Connectors component of Oracle MySQL.