Vulnerability in the MySQL Client product of Oracle MySQL (component: Client: mysqldump). Supported versions that are affected are 8.0.39 and prior, 8.4.2 and prior and 9.0.1 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Client. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Client accessible data as well as unauthorized read access to a subset of MySQL Client accessible data. CVSS 3.1 Base Score 3.8 (Confidentiality and Integrity impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:N).
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://security.netapp.com/advisory/ntap-20241101-0006/ | |
| https://www.oracle.com/security-alerts/cpuoct2024.html | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
13 Mar 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : unknown |
| References |
|
16 Oct 2024, 20:33
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Oracle mysql
Oracle |
|
| CWE | NVD-CWE-noinfo | |
| References | () https://www.oracle.com/security-alerts/cpuoct2024.html - Patch, Vendor Advisory | |
| CPE | cpe:2.3:a:oracle:mysql:*:*:*:*:*:*:*:* cpe:2.3:a:oracle:mysql:9.0.1:*:*:*:*:*:*:* cpe:2.3:a:oracle:mysql:9.0.0:*:*:*:*:*:*:* |
15 Oct 2024, 20:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2024-10-15 20:15
Updated : 2025-03-13 16:15
NVD link : CVE-2024-21247
Mitre link : CVE-2024-21247
JSON object : View
Products Affected
oracle
- mysql
CWE