Oracle Corp. MySQL

Name: Oracle Corp. MySQL
Brand: Oracle Corp.

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical17high256medium55low

updated 2026-10-27

vulnerabilities (340)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2017-3599US	high7.5	90.0% (100th)	Exploit	no fix	2017-04-24	≤ 5.7.17
CVE-2015-3194US	high7.5	44.0% (99th)	Exploit	no fix	2015-12-06	2 versions
CVE-2015-4870US	medium4.0	30.1% (98th)	Exploit	no fix	2015-10-21	2 versions
CVE-2016-6304US	high7.5	63.0% (99th)	—	no fix	2016-09-26	2 versions
CVE-2021-2429US	medium4.3	41.5% (99th)	—	no fix	2021-07-21	8.0.0 → 8.0.25
CVE-2014-3569US	medium5.0	19.5% (97th)	—	no fix	2014-12-24	5.6.0 → 5.6.23
CVE-2018-0739US	medium6.5	18.6% (97th)	—	no fix	2018-03-27	3 versions
CVE-2018-0734US	medium5.9OT elevated	12.2% (96th)	—	no fix	2018-10-30	3 versions
CVE-2015-0501US	medium5.7	10.3% (96th)	—	no fix	2015-04-16	2 versions
CVE-2016-0639US	critical9.8	10.2% (96th)	—	no fix	2016-04-21	2 versions
CVE-2021-2389US	high7.1	8.15% (95th)	—	no fix	2021-07-21	2 versions
CVE-2016-0505US	medium6.8	7.51% (94th)	—	no fix	2016-01-21	3 versions
CVE-2015-4816US	medium4.0	7.45% (94th)	—	no fix	2015-10-21	≤ 5.5.44
CVE-2015-2568US	medium5.0	7.16% (94th)	—	no fix	2015-04-16	2 versions
CVE-2015-4757US	low3.5	6.92% (94th)	—	no fix	2015-07-16	2 versions
CVE-2014-0001US	high7.5	6.40% (94th)	—	no fix	2014-01-31	≤ 5.5.34
CVE-2015-0433US	medium4.0	5.43% (93rd)	—	no fix	2015-04-16	2 versions
CVE-2015-2571US	medium4.0	5.32% (93rd)	—	no fix	2015-04-16	2 versions
CVE-2015-0505US	low3.5	5.19% (92nd)	—	no fix	2015-04-16	2 versions
CVE-2015-2573US	medium4.0	5.12% (92nd)	—	no fix	2015-04-16	2 versions
CVE-2015-7744US	medium5.9	5.07% (92nd)	—	no fix	2016-01-22	2 versions
CVE-2014-2431US	low2.6	5.06% (92nd)	—	no fix	2014-04-16	2 versions
CVE-2015-0499US	low3.5	4.89% (92nd)	—	no fix	2015-04-16	2 versions
CVE-2017-3238US	medium6.5	4.79% (92nd)	—	no fix	2017-01-27	3 versions
CVE-2014-2440US	medium5.1	4.71% (92nd)	—	no fix	2014-04-16	2 versions
CVE-2013-5908US	low2.6	4.67% (92nd)	—	no fix	2014-01-15	3 versions
CVE-2018-2696US	high7.5	4.52% (91st)	—	no fix	2018-01-18	2 versions
CVE-2015-0441US	medium4.0	4.51% (91st)	—	no fix	2015-04-16	2 versions
CVE-2019-2529US	medium6.5	4.49% (91st)	—	no fix	2019-01-16	3 versions
CVE-2018-3144US	medium5.9	4.45% (91st)	—	no fix	2018-10-17	2 versions
CVE-2016-0609US	low1.7	4.42% (91st)	—	no fix	2016-01-21	3 versions
CVE-2017-3243US	medium4.4	4.34% (91st)	—	no fix	2017-01-27	≤ 5.5.53
CVE-2015-2582US	medium4.0	4.33% (91st)	—	no fix	2015-07-16	≤ 5.6.24
CVE-2016-0597US	medium4.0	4.30% (91st)	—	no fix	2016-01-21	3 versions
CVE-2016-0596US	medium4.0	4.30% (91st)	—	no fix	2016-01-21	2 versions
CVE-2016-0616US	medium4.0	4.28% (91st)	—	no fix	2016-01-21	5.5 → 5.5.46
CVE-2021-2390US	high7.1	4.27% (91st)	—	no fix	2021-07-21	2 versions
CVE-2019-2537US	medium4.9	4.27% (91st)	—	no fix	2019-01-16	3 versions
CVE-2016-0606US	low3.5	4.23% (91st)	—	no fix	2016-01-21	3 versions
CVE-2015-4879US	medium4.6	4.21% (91st)	—	no fix	2015-10-21	2 versions
CVE-2015-4802US	medium4.0	4.19% (91st)	—	no fix	2015-10-21	2 versions
CVE-2015-4752US	medium4.0	4.08% (91st)	—	no fix	2015-07-16	2 versions
CVE-2019-2740US	medium6.5	4.00% (90th)	—	no fix	2019-07-23	3 versions
CVE-2018-3282US	medium4.9	4.00% (90th)	—	no fix	2018-10-17	4 versions
CVE-2015-4836US	low2.8	3.97% (90th)	—	no fix	2015-10-21	2 versions
CVE-2015-4858US	medium4.0	3.95% (90th)	—	no fix	2015-10-21	2 versions
CVE-2019-2737US	medium4.9	3.95% (90th)	—	no fix	2019-07-23	3 versions
CVE-2016-0608US	low3.5	3.94% (90th)	—	no fix	2016-01-21	3 versions
CVE-2016-0600US	low3.5	3.94% (90th)	—	no fix	2016-01-21	3 versions
CVE-2016-0598US	low3.5	3.94% (90th)	—	no fix	2016-01-21	3 versions

showing 50 of 340

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control126 CVEs
CWE-17CWE-1784 CVEs
CWE-264CWE-26443 CVEs
CWE-20Improper Input Validation37 CVEs
CWE-404Improper Resource Shutdown or Release29 CVEs
CWE-400Uncontrolled Resource Consumption6 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor5 CVEs
CWE-362Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')4 CVEs

sources (1)

Which sources assert this record, and when.

RUBDU (FSTEC Data Security Threats Database)340 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan