CVE-2025-50087: Medium severity Oracle MySQL Server vulnerability
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are affected are 8.0.0-8.0.42, 8.4.0-8.4.5 and 9.0.0-9.3.0. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to critical data or all MySQL Server accessible data. CVSS 3.1 Base Score 4.9 (Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N).
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-50087?
CVE-2025-50087 is classified as an easily exploitable vulnerability affecting specific versions of MySQL Server.
How do I fix CVE-2025-50087?
To fix CVE-2025-50087, users should upgrade their MySQL Server to a version not affected by this vulnerability.
Which MySQL Server versions are affected by CVE-2025-50087?
CVE-2025-50087 affects MySQL Server versions 8.0.0 to 8.0.42, 8.4.0 to 8.4.5, and 9.0.0 to 9.3.0.
What type of attacker can exploit CVE-2025-50087?
CVE-2025-50087 can be exploited by a high-privileged attacker with network access.
What component of MySQL Server does CVE-2025-50087 affect?
CVE-2025-50087 affects the Optimizer component of MySQL Server.