Oracle MySQL <=5.7.37

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical0high28medium6low

updated 2026-10-27

vulnerabilities (34)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-44832US	medium6.6	97.9% (100th)	Exploit	no fix	2021-12-28	—
CVE-2021-41184US	medium6.1	40.8% (99th)	Exploit	no fix	2021-10-26	—
CVE-2022-21490US	medium4.0	79.4% (100th)	—	no fix	2022-04-19	—
CVE-2022-21489US	medium4.0	78.9% (100th)	—	no fix	2022-04-19	—
CVE-2022-21482US	medium4.0	3.13% (88th)	—	no fix	2022-04-19	—
CVE-2022-21483US	medium4.0	3.00% (87th)	—	no fix	2022-04-19	—
CVE-2021-22570US	medium5.5	2.66% (86th)	—	no fix	2022-01-26	—
CVE-2022-21457US	medium4.3	2.09% (82nd)	—	no fix	2022-04-19	—
CVE-2022-21427US	medium4.0	2.00% (81st)	—	no fix	2022-04-19	—
CVE-2022-21485US	low2.9	1.78% (78th)	—	no fix	2022-04-19	—
CVE-2022-21486US	low2.9	1.65% (76th)	—	no fix	2022-04-19	—
CVE-2022-21484US	low2.9	1.65% (76th)	—	no fix	2022-04-19	—
CVE-2022-21479US	medium5.5	1.55% (75th)	—	no fix	2022-04-19	—
CVE-2022-21417US	medium4.0	1.46% (73rd)	—	no fix	2022-04-19	—
CVE-2022-21412US	medium4.0	1.46% (73rd)	—	no fix	2022-04-19	—
CVE-2022-21413US	medium4.0	1.42% (73rd)	—	no fix	2022-04-19	—
CVE-2022-21415US	medium4.0	1.38% (72nd)	—	no fix	2022-04-19	—
CVE-2022-21454US	medium4.0	1.37% (72nd)	—	no fix	2022-04-19	—
CVE-2022-21414US	medium4.0	1.37% (72nd)	—	no fix	2022-04-19	—
CVE-2022-21460US	low2.1	1.32% (71st)	—	no fix	2022-04-19	—
CVE-2022-21437US	medium4.0	1.30% (70th)	—	no fix	2022-04-19	—
CVE-2022-21435US	medium4.0	1.30% (70th)	—	no fix	2022-04-19	—
CVE-2022-21423US	medium4.0	1.28% (70th)	—	no fix	2022-04-19	—
CVE-2022-21444US	low2.1	1.27% (70th)	—	no fix	2022-04-19	—
CVE-2022-21478US	medium5.5	1.26% (69th)	—	no fix	2022-04-19	—
CVE-2022-21425US	medium5.5	1.26% (69th)	—	no fix	2022-04-19	—
CVE-2022-21462US	medium4.0	1.25% (69th)	—	no fix	2022-04-19	—
CVE-2022-21452US	medium4.0	1.25% (69th)	—	no fix	2022-04-19	—
CVE-2022-21438US	medium4.0	1.25% (69th)	—	no fix	2022-04-19	—
CVE-2022-21436US	medium4.0	1.25% (69th)	—	no fix	2022-04-19	—
CVE-2022-21451US	low2.1	1.23% (69th)	—	no fix	2022-04-19	—
CVE-2022-21418US	medium4.9	1.10% (65th)	—	no fix	2022-04-19	—
CVE-2022-21459US	medium5.5	1.09% (65th)	—	no fix	2022-04-19	—
CVE-2022-21440US	medium5.5	1.09% (65th)	—	no fix	2022-04-19	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation27 CVEs
CWE-400Uncontrolled Resource Consumption4 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-404Improper Resource Shutdown or Release1 CVEs
CWE-476NULL Pointer Dereference1 CVEs
CWE-74Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')1 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)34 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan