Known vulnerabilities in MySQL Enterprise Backup

Known vulnerabilities in MySQL Enterprise Backup

Vendor: Oracle

Software: MySQL Enterprise Backup

Software CPE: cpe:2.3:a:oracle:mysql_enterprise_backup:*:*:*:*:*:*:*:*

Website: https://www.oracle.com

Total vulnerabilities: 15

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Vulnerabilities (15)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU122076 - Stack-based buffer overflow CVE-2025-15467	CWE-121	High	Available	No	-	27.01.2026	SB2026012785 SB2026012791 SB2026012792 and 66 more
#VU121025 - Unsynchronized Access to Shared Data in a Multithreaded Context CVE-2025-14017	CWE-567	Low	No	No	-	07.01.2026	SB2026010741 SB2026010915 SB2026010935 and 14 more
#VU116213 - Out-of-bounds write CVE-2025-9230	CWE-787	Medium	No	No	-	01.10.2025	SB2025100119 SB2025100132 SB2025100133 and 108 more
#VU115138 - Out-of-bounds read CVE-2025-9086	CWE-125	Low	No	No	8.0.44, 8.4.7, 9.5.0	10.09.2025	SB2025091034 SB2025091144 SB2025091301 and 44 more
#VU110191 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2025-5399	CWE-835	Low	No	No	-	04.06.2025	SB2025060430 SB2025060503 SB2025061212 and 10 more
#VU103646 - Integer overflow CVE-2025-0725	CWE-190	High	No	No	-	05.02.2025	SB2025020531 SB2025020601 SB2025020658 and 25 more
#VU103600 - Covert Timing Channel CVE-2024-13176	CWE-385	Medium	No	No	-	04.02.2025	SB2025020454 SB2025020456 SB2025020656 and 59 more
#VU101654 - Exposure of sensitive information to an unauthorized actor CVE-2024-11053	CWE-200	Low	No	No	8.0.41, 8.4.4, 9.2.0	11.12.2024	SB2024121137 SB2024121189 SB2024121190 and 32 more
#VU95131 - Out-of-bounds read CVE-2024-7264	CWE-125	Medium	No	No	-	01.08.2024	SB2024080110 SB2024080117 SB20240805104 and 43 more
#VU93424 - Out-of-bounds read CVE-2024-5535	CWE-125	Low	Available	No	-	27.06.2024	SB2024062720 SB20240717135 SB2024072154 and 157 more
#VU85927 - Improper Check for Certificate Revocation CVE-2024-0853	CWE-299	Low	No	No	-	31.01.2024	SB2024013108 SB2024020838 SB2024032231 and 10 more
#VU85170 - State Issues CVE-2023-6129	CWE-371	Medium	No	No	-	09.01.2024	SB2024010929 SB2024012250 SB2024012612 and 69 more
#VU64922 - Missing Encryption of Sensitive Data CVE-2022-2097	CWE-311	Low	No	No	-	05.07.2022	SB2022070509 SB2022070522 SB2022070531 and 112 more
#VU64684 - Incorrect Default Permissions CVE-2022-32207	CWE-276	Low	No	No	-	27.06.2022	SB2022062711 SB2022062724 SB2022062816 and 35 more
#VU21043 - Cryptographic Issues CVE-2019-1547	CWE-310	Low	No	No	3.12.5, 4.1.4	11.09.2019	SB2019091112 SB2019091202 SB2019092407 and 39 more