Oracle MySQL <=5.7.40

productDE

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

1critical3high4medium1low

updated 2026-10-27

vulnerabilities (29)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-21887US	—	43.4% (99th)	Exploit	no fix	2023-01-18	—
CVE-2020-36242US	critical9.1	6.72% (94th)	—	no fix	2021-02-07	—
CVE-2022-42252US	high7.5	1.57% (75th)	—	no fix	2022-11-01	—
CVE-2022-1941US	high7.5	1.51% (74th)	—	no fix	2022-09-22	—
CVE-2023-21875US	medium5.9	1.48% (74th)	—	no fix	2023-01-18	—
CVE-2022-3171US	high7.5	1.28% (70th)	—	no fix	2022-10-12	—
CVE-2023-21865US	—	1.12% (66th)	—	no fix	2023-01-18	—
CVE-2023-21864US	—	1.12% (66th)	—	no fix	2023-01-18	—
CVE-2023-21840US	—	1.11% (66th)	—	no fix	2023-01-18	—
CVE-2023-21866US	—	1.05% (64th)	—	no fix	2023-01-18	—
CVE-2023-21874US	—	1.02% (63rd)	—	no fix	2023-01-18	—
CVE-2023-21872US	—	0.94% (61st)	—	no fix	2023-01-18	—
CVE-2023-21868US	—	0.89% (59th)	—	no fix	2023-01-18	—
CVE-2023-21883US	—	0.86% (58th)	—	no fix	2023-01-18	—
CVE-2023-21881US	—	0.86% (58th)	—	no fix	2023-01-18	—
CVE-2023-21879US	—	0.86% (58th)	—	no fix	2023-01-18	—
CVE-2023-21878US	—	0.86% (58th)	—	no fix	2023-01-18	—
CVE-2023-21876US	—	0.86% (58th)	—	no fix	2023-01-18	—
CVE-2023-21873US	—	0.86% (58th)	—	no fix	2023-01-18	—
CVE-2023-21871US	—	0.86% (58th)	—	no fix	2023-01-18	—
CVE-2023-21870US	—	0.86% (58th)	—	no fix	2023-01-18	—
CVE-2023-21867US	—	0.86% (58th)	—	no fix	2023-01-18	—
CVE-2023-21863US	—	0.86% (58th)	—	no fix	2023-01-18	—
CVE-2023-21880US	medium5.5	0.82% (57th)	—	no fix	2023-01-18	—
CVE-2023-21877US	medium5.5	0.80% (56th)	—	no fix	2023-01-18	—
CVE-2023-21869US	—	0.80% (56th)	—	no fix	2023-01-18	—
CVE-2023-21836US	—	0.77% (56th)	—	no fix	2023-01-18	—
CVE-2023-21882US	low2.7	0.64% (51st)	—	no fix	2023-01-18	—
CVE-2023-21860US	medium6.3	0.60% (49th)	—	no fix	2023-01-18	—

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation25 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer1 CVEs
CWE-1286Improper Validation of Syntactic Correctness of Input1 CVEs
CWE-190Integer Overflow or Wraparound1 CVEs
CWE-284Improper Access Control1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-404Improper Resource Shutdown or Release1 CVEs
CWE-444Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')1 CVEs

sources (1)

Which sources assert this record, and when.

DECERT-Bund (BSI CSAF)29 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan