CVE security advisories and vulnerability history for MySQL Server by oracle.
1,093
Total CVEs
Published
0
In CISA KEV
Exploited in the wild
15
Public exploits
PoC or exploit code
5.2
Avg CVSS
2017–2026
Last updated
Overview
oracle MySQL Server has 1,093 published CVE records since 2017, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 15 have a known public exploit. The average CVSS base score across scored CVEs is 5.2.
This page aggregates every publicly disclosed vulnerability (CVE) affecting oracle MySQL Server, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.
Severity and exploitation
How the CVSS severity of oracle MySQL Server's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.
Critical8
High48
Medium965
Low72
In CISA’s Known Exploited Vulnerabilities catalog
0
None of oracle MySQL Server's CVEs are currently listed in CISA's KEV catalog.
Public exploits
15
15 of oracle MySQL Server's CVEs have a known public exploit available.
Affected versions and CVEs
Browse every oracle MySQL Server version named in a CVE, then pick one to see only the CVEs that affect it.
Common questions about oracle MySQL Server vulnerabilities.
How many CVEs does oracle MySQL Server have?
oracle MySQL Server has 1,093 published CVE records since 2017.
How many oracle MySQL Server CVEs are in CISA KEV?
None of oracle MySQL Server's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for oracle MySQL Server vulnerabilities?
Yes — 15 of oracle MySQL Server's CVEs have a known public exploit.
Which versions of oracle MySQL Server are affected?
293 distinct oracle MySQL Server versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in oracle MySQL Server CVEs?
oracle MySQL Server's CVEs most often map to these CWE weakness types: CWE-400 (Uncontrolled Resource Consumption), CWE-284 (Improper Access Control), CWE-770 (Allocation of Resources Without Limits or Throttling), CWE-732 (Incorrect Permission Assignment for Critical Resource).
How many critical oracle MySQL Server vulnerabilities are there?
oracle MySQL Server has 8 critical and 48 high-severity CVEs.
What is the average severity of oracle MySQL Server CVEs?
The average CVSS base score across oracle MySQL Server's scored CVEs is 5.2.
