oracle mysql

Name: oracle mysql
Brand: oracle

productUS

cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

by severity

8critical70high927medium161low

updated 2026-10-27

vulnerabilities (1,362)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2012-2122US	medium5.1	96.5% (100th)	Exploit	no fix	2012-06-26	27 versions
CVE-2008-0226US	high7.5	91.6% (100th)	Exploit	no fix	2008-01-10	47 versions
CVE-2017-3599US	high7.5	90.0% (100th)	Exploit	no fix	2017-04-24	2 versions
CVE-2020-5398US	high7.5OT high	88.3% (100th)	Exploit	no fix	2020-01-17	2 versions
CVE-2003-0780US	high9.0	78.4% (100th)	Exploit	no fix	2003-09-22	61 versions
CVE-2009-4484US	high7.5	69.6% (99th)	Exploit	5.0.90	2009-12-30	3 versions
CVE-2016-6662US	critical9.8	67.7% (99th)	Exploit	no fix	2016-09-20	3 versions
CVE-2020-1967US	high7.5	53.3% (99th)	Exploit	no fix	2020-04-21	3 versions
CVE-2003-0150US	high9.0OT high	44.8% (99th)	Exploit	no fix	2003-03-24	6 versions
CVE-2023-21887US	—	43.4% (99th)	Exploit	no fix	2023-01-18	8.0.0 → 8.0.31
CVE-2006-1518US	medium6.5	38.4% (99th)	Exploit	no fix	2006-05-05	12 versions
CVE-2006-1516US	medium5.0	36.4% (98th)	Exploit	no fix	2006-05-05	50 versions
CVE-2012-5613US	medium6.0	31.7% (98th)	Exploit	no fix	2012-12-03	= 5.5.19
CVE-2006-3469US	medium4.0	31.1% (98th)	Exploit	no fix	2006-07-21	15 versions
CVE-2015-4870US	medium4.0	30.1% (98th)	Exploit	no fix	2015-10-21	2 versions
CVE-2006-3081US	medium4.0	25.8% (98th)	Exploit	no fix	2006-06-19	6 versions
CVE-2012-5611US	medium6.5	24.0% (98th)	Exploit	no fix	2012-12-03	2 versions
CVE-2002-1375US	high7.5	23.5% (98th)	Exploit	no fix	2002-12-23	47 versions
CVE-2004-0835US	high7.5	22.4% (98th)	Exploit	3.23.59	2004-11-03	3 versions
CVE-2012-5612US	medium6.5	21.0% (98th)	Exploit	no fix	2012-12-03	5.5.0 → 5.5.28
CVE-2002-1374US	high7.5	20.5% (97th)	Exploit	no fix	2002-12-23	47 versions
CVE-2013-1861US	medium5.0	18.8% (97th)	Exploit	no fix	2013-03-28	3 versions
CVE-2005-0709US	medium4.6	18.4% (97th)	Exploit	no fix	2005-05-02	27 versions
CVE-2009-4019US	medium4.0	16.3% (97th)	Exploit	no fix	2009-11-30	56 versions
CVE-2002-1809US	high7.5OT high	16.1% (97th)	Exploit	no fix	2002-12-31	34 versions
CVE-2012-5615US	medium5.0	14.8% (97th)	Exploit	no fix	2012-12-03	= 5.5.19
CVE-2006-4227US	medium6.5	13.6% (96th)	Exploit	no fix	2006-08-18	4 versions
CVE-2012-5614US	medium4.0	13.2% (96th)	Exploit	no fix	2012-12-03	2 versions
CVE-2005-0710US	medium4.6	12.8% (96th)	Exploit	no fix	2005-05-02	27 versions
CVE-2010-3683US	medium4.0	12.2% (96th)	Exploit	no fix	2011-01-11	52 versions
CVE-2010-3681US	medium4.0	12.2% (96th)	Exploit	no fix	2011-01-11	52 versions
CVE-2010-3680US	medium4.0	12.2% (96th)	Exploit	no fix	2011-01-11	47 versions
CVE-2010-3679US	medium4.0	12.2% (96th)	Exploit	no fix	2011-01-11	47 versions
CVE-2010-3678US	medium4.0	12.2% (96th)	Exploit	no fix	2011-01-11	47 versions
CVE-2010-3682US	medium4.0	11.4% (96th)	Exploit	no fix	2011-01-11	83 versions
CVE-2012-5627US	medium4.0	11.4% (96th)	Exploit	5.5.29	2013-10-01	5.5.0 → 5.5.29
CVE-2007-2583US	medium4.0	11.3% (96th)	Exploit	5.0.40	2007-05-10	2 versions
CVE-2019-14540US	critical9.8	10.8% (96th)	Exploit	no fix	2019-09-15	2 versions
CVE-2009-2446US	high8.5	10.6% (96th)	Exploit	no fix	2009-07-13	79 versions
CVE-2009-0819US	medium4.0	10.2% (96th)	Exploit	no fix	2009-03-05	31 versions
CVE-2010-3676US	medium4.0	9.47% (95th)	Exploit	no fix	2011-01-11	47 versions
CVE-2010-2008US	low3.5	9.01% (95th)	Exploit	5.1.48	2010-07-13	< 5.1.48
CVE-2009-5026US	medium6.8	7.76% (95th)	Exploit	no fix	2012-08-17	60 versions
CVE-2015-3152US	medium5.9	7.14% (94th)	Exploit	no fix	2016-05-16	≤ 5.7.2
CVE-2008-4456US	low2.6	7.05% (94th)	Exploit	no fix	2008-10-06	11 versions
CVE-2020-1971US	medium5.9	6.99% (94th)	Exploit	no fix	2020-12-08	≤ 8.0.22
CVE-2000-0045US	medium6.4	6.99% (94th)	Exploit	no fix	2000-01-11	3 versions
CVE-2008-3963US	medium4.0	6.46% (94th)	Exploit	no fix	2008-09-11	42 versions
CVE-2001-1274US	high7.5	5.43% (93rd)	Exploit	no fix	2001-01-23	≤ 3.23.31
CVE-2016-6663US	high7.0	4.31% (91st)	Exploit	no fix	2016-12-13	4 versions

showing 50 of 1,362

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation401 CVEs
CWE-400Uncontrolled Resource Consumption283 CVEs
CWE-284Improper Access Control166 CVEs
CWE-264CWE-264154 CVEs
CWE-404Improper Resource Shutdown or Release96 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor90 CVEs
CWE-17CWE-1782 CVEs
CWE-770Allocation of Resources Without Limits or Throttling24 CVEs

sources (2)

Which sources assert this record, and when.

USNVD / CVE1,328 CVEs
NLNCSC-NL (CSAF)58 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan