Oracle Corporation MySQL Connectors

Name: Oracle Corporation MySQL Connectors
Brand: Oracle Corporation

productEU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical6high8medium3low

updated 2026-10-28

vulnerabilities (65)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-2471US	high7.9OT high	7.49% (94th)	Exploit	no fix	2021-10-20	≤ 8.0.26 and prior
CVE-2023-21971US	—	1.48% (74th)	Exploit	no fix	2023-04-18	≤ 8.0.32 and prior
CVE-2025-21574US	—	1.12% (66th)	Exploit	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2024-13176US	—	0.61% (49th)	Exploit	no fix	2025-01-20	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2024-21262US	—OT elevated	0.57% (47th)	Exploit	no fix	2024-10-15	≤ * ≤9.0.0
CVE-2018-3258US	high8.8	3.74% (90th)	—	no fix	2018-10-17	≤ 8.0.12 and prior
CVE-2018-2585US	high7.5	2.96% (87th)	—	no fix	2018-01-18	2 versions
CVE-2017-3523US	high8.5	2.88% (87th)	—	no fix	2017-04-24	≤ 5.1.40 and earlier
CVE-2024-7254US	high7.5	2.77% (86th)	—	no fix	2024-09-19	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2017-10203US	medium5.3	2.62% (85th)	—	no fix	2017-10-19	≤ 6.9.9 and earlier
CVE-2019-2435US	high8.1	2.53% (85th)	—	no fix	2019-01-16	2 versions
CVE-2019-2920US	medium5.3OT elevated	2.25% (83rd)	—	no fix	2019-10-16	2 versions
CVE-2020-2875US	medium4.7	2.22% (83rd)	—	no fix	2020-04-15	2 versions
CVE-2017-3586US	medium6.4	1.71% (77th)	—	no fix	2017-04-24	≤ 5.1.41 and earlier
CVE-2017-10277US	medium5.4	1.70% (77th)	—	no fix	2017-10-19	≤ 6.9.9 and earlier
CVE-2020-2933US	low2.2	1.55% (75th)	—	no fix	2020-04-15	≤ 5.1.48 and prior
CVE-2022-21363US	medium6.0	1.42% (73rd)	—	no fix	2022-01-19	≤ 8.0.27 and prior
CVE-2024-40896US	—	1.22% (69th)	—	no fix	2024-12-23	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-30715US	—	0.99% (62nd)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-30705US	—	0.99% (62nd)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-30693US	—	0.99% (62nd)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2023-22102US	—	0.99% (62nd)	—	no fix	2023-10-17	≤ * ≤8.1.0
CVE-2025-21575US	—	0.97% (62nd)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-30699US	—	0.92% (60th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-30696US	—	0.92% (60th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-30689US	—	0.92% (60th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-30685US	—	0.92% (60th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-30684US	—	0.92% (60th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-30683US	—	0.92% (60th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-21588US	—	0.92% (60th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-21585US	—	0.92% (60th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-21584US	—	0.92% (60th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-21581US	—	0.92% (60th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-21583US	—	0.86% (58th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-30704US	—	0.85% (58th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-30688US	—	0.83% (58th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-30687US	—	0.83% (58th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-30682US	—	0.83% (58th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-21577US	—	0.82% (57th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-30681US	—	0.80% (57th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-21580US	—	0.77% (56th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-21579US	—	0.77% (56th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-30695US	—	0.75% (55th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2024-21090US	—	0.72% (54th)	—	no fix	2024-04-16	≤ * ≤8.3.0
CVE-2025-30710US	—	0.63% (50th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-30706US	—OT elevated	0.63% (50th)	—	no fix	2025-04-15	2 versions
CVE-2025-30703US	—OT elevated	0.58% (48th)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2024-21272US	—OT elevated	0.51% (44th)	—	no fix	2024-10-15	≤ * ≤9.0.0
CVE-2025-30722US	medium6.8	0.50% (43rd)	—	no fix	2025-04-15	≤ vers:semver/9.0.0\|<=9.2.0
CVE-2025-21548US	—	0.48% (41st)	—	no fix	2025-01-21	≤ * ≤9.1.0

showing 50 of 65

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-284Improper Access Control17 CVEs
CWE-400Uncontrolled Resource Consumption15 CVEs
CWE-732Incorrect Permission Assignment for Critical Resource12 CVEs
CWE-20Improper Input Validation9 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-863Incorrect Authorization4 CVEs
CWE-306Missing Authentication for Critical Function3 CVEs
CWE-264CWE-2642 CVEs

sources (2)

Which sources assert this record, and when.

NLNCSC-NL (CSAF)34 CVEs
EUEU Vulnerability Database (ENISA)33 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan