Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affected are 5.7.37 and prior and 8.0.28 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.4 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H).
CVSS v4.0 Metrics
Exploitability
Attack VectorNetwork
ComplexityHigh
RequirementsPresent
PrivilegesHigh
User InteractionNone
Threat
Exploit MaturityPoC
Vulnerable System
ConfidentialityNone
IntegrityNone
AvailabilityHigh
Subsequent System
ConfidentialityNone
IntegrityNone
AvailabilityNone
Supplemental
SafetyNegligible
AutomatableYes
RecoveryAutomatic
Value DensityConcentrated
UrgencyMedium
Change Log
| Date | Source | Changes | Score |
|---|
| 2026-07-21 | PoC | E: U→P | 2.1 → 5.0 |
| 2026-07-21 | cve.org | initial, patch: Unavailable | 2.1 |
Affected Software
| Vendor | Product | Version |
|---|
| netapp | active_iq_unified_manager | All versions |
| netapp | oncommand_insight | All versions |
| netapp | snapcenter | All versions |
| oracle | mysql | ≥ 5.0.00, ≤ 5.7.37 |
| oracle | mysql | ≥ 8.0.00, ≤ 8.0.28 |
| Oracle Corporation | MySQL Server | ≤ 8.0.28 |
| Oracle Corporation | MySQL Server | ≤ 5.7.37 |
Published: 2022-04-19
