Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2026-60331

Опубликовано: 21 июл. 2026
Источник: nvd
CVSS3: 6.4
EPSS Низкий

Описание

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:oracle:mysql_server:*:*:*:*:*:*:*:*
Версия от 8.4.0 (включая) до 8.4.10 (включая)
cpe:2.3:a:oracle:mysql_server:9.7.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql_server:9.7.1:*:*:*:*:*:*:*
Конфигурация 2

Одно из

cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*
Версия от 8.0.0 (включая) до 8.0.47 (включая)
cpe:2.3:a:oracle:mysql_cluster:*:*:*:*:*:*:*:*
Версия от 8.4.0 (включая) до 8.4.10 (включая)
cpe:2.3:a:oracle:mysql_cluster:9.7.0:*:*:*:*:*:*:*
cpe:2.3:a:oracle:mysql_cluster:9.7.1:*:*:*:*:*:*:*

EPSS

Процентиль: 3%
0.00136
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-284

Связанные уязвимости

ubuntu логотип

CVE-2026-60331

CVSS3: 6.4
ubuntu
9 дней назад

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

redhat логотип

CVE-2026-60331

CVSS3: 6.4
redhat
10 дней назад

Oracle CPU describes the issue as following: Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster.

debian логотип

CVE-2026-60331

CVSS3: 6.4
debian
9 дней назад

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MyS ...

github логотип

GHSA-9h9h-6f2c-xmhc

CVSS3: 6.4
github
9 дней назад

Vulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server: Replication). Supported versions that are affected are MySQL Server: 8.4.0-8.4.10, 9.7.0-9.7.1; MySQL Cluster: 8.0.0-8.0.47, 8.4.0-8.4.10 and 9.7.0-9.7.1. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server, MySQL Cluster executes to compromise MySQL Server, MySQL Cluster. Successful attacks of this vulnerability can result in takeover of MySQL Server, MySQL Cluster. CVSS 3.1 Base Score 6.4 (Confidentiality, Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H).

EPSS

Процентиль: 3%
0.00136
Низкий

6.4 Medium

CVSS3

Дефекты

CWE-284