CVE-2024-21262
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk46th percentile - higher than 46% of all known CVEs
Summary
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). Supported versions affected are 9.0.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks can result in unauthorized update, insert or delete access and partial denial of service.
Risk Assessment
An attacker could modify data or cause partial unavailability, potentially affecting integrity and availability of applications using Connector/ODBC.
Recommendation
Apply Oracle-provided patches for MySQL Connectors, upgrading to a version later than 9.0.0.
Other vulnerabilities in MySQL Connectors
See all- CVE-2026-71084Medium
Vulnerability in MySQL Connectors (component: Connector/ODBC) version 26.7.0. Easily exploitable by unauthenticated attacker with local access. Successful attack can cause complete DoS and unauthorized read access to data.
- CVE-2026-71079Medium
Vulnerability in MySQL Connectors (component: Connector/ODBC) version 26.7.0. Easily exploitable by low-privileged attacker over network (multiple protocols). Successful attack can cause complete DoS.
- CVE-2026-71073Medium
Vulnerability in MySQL Connectors (Connector/ODBC component) version 26.7.0. An easily exploitable flaw allows an unauthenticated attacker with logon to the infrastructure to cause a complete denial of service (hang or frequent crashes).
- CVE-2026-60586High
Vulnerability in MySQL Connectors (component: Connector/J) versions 9.7.0-9.7.1. Easily exploitable, requires low-privileged attacker with network access via multiple protocols. Successful attack can lead to unauthorized access to critical data and impact other products.
- CVE-2026-60192High
Vulnerability in MySQL Connectors product of Oracle MySQL (component: Connector/Net). Affected versions are 9.7.0 and 9.7.1. A difficult to exploit vulnerability allows an unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors, potentially leading to a takeover.
- CVE-2026-60180High
Vulnerability in MySQL Connectors (Connector/C++ component) allows an unauthenticated attacker to remotely cause a hang or frequent crash (complete DOS) via multiple protocols. The attack is easily exploitable.
- CVE-2026-60179High
Vulnerability in MySQL Connectors (component: Connector/C++) versions 9.7.0-9.7.1. An unauthenticated attacker with network access via multiple protocols can gain full access to critical data and modify it.
- CVE-2025-30714Medium
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/Python). Supported versions affected are 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks require human interaction and can result in unauthorized access to critical data or complete access to all MySQL Connectors accessible data.
Original NVD description (English source)
Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). Supported versions that are affected are 9.0.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).
Vulnerability data from NVD (NIST) · CISA KEV · EPSS