PT-2025-29623 · Oracle · Mysql 8.0+2

Published 2025-07-15 · Updated 2025-08-29 · CVE-2025-50068

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:L/AC:L/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0

Description This issue affects the Cluster component of Oracle MySQL. A highly privileged attacker with logon access to the infrastructure where MySQL Cluster executes can compromise the MySQL Cluster, potentially leading to a takeover.

Recommendations Versions prior to 8.0.43 should be updated. Versions prior to 8.4.6 should be updated. Versions prior to 9.3.1 should be updated.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2025-08660

CVE-2025-50068

OESA-2025-2085

Affected Products

Mysql 8.0

Mysql 8.4

Mysql 9.0

References · 33

• https://osv.dev/vulnerability/CVE-2025-50068 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-53023 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-50098 · Security Note
• https://osv.dev/vulnerability/OESA-2025-2085 · Vendor Advisory
• https://oracle.com/security-alerts/cpujul2025.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-50084 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-50081 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-50099 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-50082 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-50083 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-50079 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-50078 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-50085 · Security Note
• https://bdu.fstec.ru/vul/2025-08660 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2025-50092 · Security Note