Oracle MySQL <=8.0.29

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical5high34medium7low

updated 2026-10-27

vulnerabilities (113)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2021-44832US	medium6.6	97.9% (100th)	Exploit	no fix	2021-12-28	—
CVE-2023-21887US	—	43.4% (99th)	Exploit	no fix	2023-01-18	—
CVE-2021-41184US	medium6.1	40.8% (99th)	Exploit	no fix	2021-10-26	—
CVE-2022-21490US	medium4.0	79.4% (100th)	—	no fix	2022-04-19	—
CVE-2022-21489US	medium4.0	78.9% (100th)	—	no fix	2022-04-19	—
CVE-2022-21550US	—	50.7% (99th)	—	no fix	2022-07-19	—
CVE-2020-36242US	critical9.1	6.72% (94th)	—	no fix	2021-02-07	—
CVE-2022-34305US	medium6.1	6.71% (94th)	—	no fix	2022-06-23	—
CVE-2022-23308US	high7.5	5.12% (92nd)	—	no fix	2022-02-26	—
CVE-2022-29824US	medium6.5	3.75% (90th)	—	no fix	2022-05-03	—
CVE-2022-21482US	medium4.0	3.13% (88th)	—	no fix	2022-04-19	—
CVE-2022-21483US	medium4.0	3.00% (87th)	—	no fix	2022-04-19	—
CVE-2021-22570US	medium5.5	2.66% (86th)	—	no fix	2022-01-26	—
CVE-2022-21457US	medium4.3	2.09% (82nd)	—	no fix	2022-04-19	—
CVE-2022-21427US	medium4.0	2.00% (81st)	—	no fix	2022-04-19	—
CVE-2022-21526US	—	1.85% (79th)	—	no fix	2022-07-19	—
CVE-2022-21537US	—	1.84% (79th)	—	no fix	2022-07-19	—
CVE-2022-21525US	—	1.84% (79th)	—	no fix	2022-07-19	—
CVE-2022-21517US	—	1.84% (79th)	—	no fix	2022-07-19	—
CVE-2022-21515US	—	1.84% (79th)	—	no fix	2022-07-19	—
CVE-2022-21485US	low2.9	1.78% (78th)	—	no fix	2022-04-19	—
CVE-2022-21530US	—	1.77% (78th)	—	no fix	2022-07-19	—
CVE-2022-21531US	—	1.72% (77th)	—	no fix	2022-07-19	—
CVE-2022-21534US	—	1.68% (77th)	—	no fix	2022-07-19	—
CVE-2022-21529US	—	1.68% (77th)	—	no fix	2022-07-19	—
CVE-2022-21522US	—	1.68% (77th)	—	no fix	2022-07-19	—
CVE-2022-21486US	low2.9	1.65% (76th)	—	no fix	2022-04-19	—
CVE-2022-21484US	low2.9	1.65% (76th)	—	no fix	2022-04-19	—
CVE-2022-21527US	—	1.65% (76th)	—	no fix	2022-07-19	—
CVE-2022-21509US	—	1.65% (76th)	—	no fix	2022-07-19	—
CVE-2022-21528US	—	1.58% (75th)	—	no fix	2022-07-19	—
CVE-2022-42252US	high7.5	1.57% (75th)	—	no fix	2022-11-01	—
CVE-2022-21479US	medium5.5	1.55% (75th)	—	no fix	2022-04-19	—
CVE-2022-39410US	—	1.52% (74th)	—	no fix	2022-10-18	—
CVE-2022-39408US	—	1.52% (74th)	—	no fix	2022-10-18	—
CVE-2022-1941US	high7.5	1.51% (74th)	—	no fix	2022-09-22	—
CVE-2023-21875US	medium5.9	1.48% (74th)	—	no fix	2023-01-18	—
CVE-2022-21633US	—	1.47% (74th)	—	no fix	2022-10-18	—
CVE-2022-21632US	—	1.47% (74th)	—	no fix	2022-10-18	—
CVE-2022-21604US	—	1.47% (74th)	—	no fix	2022-10-18	—
CVE-2022-21599US	—	1.47% (74th)	—	no fix	2022-10-18	—
CVE-2022-21594US	—	1.47% (74th)	—	no fix	2022-10-18	—
CVE-2022-21417US	medium4.0	1.46% (73rd)	—	no fix	2022-04-19	—
CVE-2022-21412US	medium4.0	1.46% (73rd)	—	no fix	2022-04-19	—
CVE-2022-39400US	—	1.45% (73rd)	—	no fix	2022-10-18	—
CVE-2022-21640US	—	1.45% (73rd)	—	no fix	2022-10-18	—
CVE-2022-21637US	—	1.45% (73rd)	—	no fix	2022-10-18	—
CVE-2022-21413US	medium4.0	1.42% (73rd)	—	no fix	2022-04-19	—
CVE-2022-21569US	—	1.41% (72nd)	—	no fix	2022-07-19	—
CVE-2022-21600US	—	1.39% (72nd)	—	no fix	2022-10-18	—

showing 50 of 113

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation84 CVEs
CWE-404Improper Resource Shutdown or Release12 CVEs
CWE-400Uncontrolled Resource Consumption5 CVEs
CWE-269Improper Privilege Management4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-190Integer Overflow or Wraparound2 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor2 CVEs
CWE-264CWE-2642 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)113 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan