Fluid Attacks Database

Description

A flaw was found in Oracle MySQL Server (Security: Privileges component). A low-privileged remote attacker with network access can gain unauthorized read and write access to MySQL Server data.

Mitigation

Update Impact

Minimal update. May introduce new vulnerabilities or breaking changes.

Ecosystem	Component	Affected version	Patched versions
rpm rhel8	mysql	<0:8.0.41-1.module+el8.10.0+22857+7f331edd	0:8.0.41-1.module+el8.10.0+22857+7f331edd
rpm rhel9	mysql	<0:8.0.41-2.el9_5	0:8.0.41-2.el9_5
rpm rhel10	mysql8.4	-	-

Aliases

1. CVE-2025-215402. NVD-2025-215403. OSV-2025-21540

Does your application use this vulnerable software?

During the free trial, our tools assess your application, identify vulnerabilities, and provide recommendations for their remediation.