Known vulnerabilities in MySQL Enterprise Backup
Vendor:
Oracle
Software:
MySQL Enterprise Backup
Software CPE:
cpe:2.3:a:oracle:mysql_enterprise_backup:*:*:*:*:*:*:*:*
Website:
https://www.oracle.com
Total vulnerabilities:
15
Public exploits:
2
Known exploited (KEV):
0
Highest CVSSv4 Score:
9.3
Breakdown by Severity Chart
8.0.44
8.0.43
8.4.7
8.4.6
9.5.0
9.4.0
9.3.0
8.4.5
8.0.42
9.1.0
9.2.0
8.4.4
8.4.3
8.0.41
8.0.40
9.0.1
9.0.0
8.4.2
8.4.1
8.4.0
8.0.39
8.0.38
8.0.37
8.3.0
8.2.0
8.1.0
8.0.36
8.0.35
8.0.34
8.0.33
8.0.32
8.0.31
8.0.30
8.0.29
8.0.28
8.0.27
8.0.26
8.0.25
8.0.24
8.0.23
8.0.22
8.0.21
8.0.20
8.0.19
8.0.18
8.0.17
8.0.16
8.0.15
8.0.14
8.0.13
8.0.12
8.0.11
8.0.10
8.0.9
8.0.8
8.0.7
8.0.6
8.0.5
8.0.4
8.0.3
8.0.2
8.0.1
8.0.0
4.1.4
4.1.3
4.1.2
4.1.1
4.1.0
4.0.3
4.0.2
4.0.1
4.0.0
3.12.5
3.12.4
3.12.3
3.12.2
3.12.1
3.12.0
3.11.1
3.11.0
Vulnerabilities (15)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU122076 - Stack-based buffer overflow CVE-2025-15467 |
CWE-121 | High | - | 27.01.2026 | - | ||
| #VU121025 - Unsynchronized Access to Shared Data in a Multithreaded Context CVE-2025-14017 |
CWE-567 | Low | - | 07.01.2026 | - | ||
| #VU116213 - Out-of-bounds write CVE-2025-9230 |
CWE-787 | Medium | - | 01.10.2025 | - | ||
| #VU115138 - Out-of-bounds read CVE-2025-9086 |
CWE-125 | Low | 8.0.44, 8.4.7, 9.5.0 | 10.09.2025 |
SB2025091034 SB2025091144 SB2025091301 and 44 more |
||
| #VU110191 - Loop with Unreachable Exit Condition ('Infinite Loop') CVE-2025-5399 |
CWE-835 | Low | - | 04.06.2025 | - | ||
| #VU103646 - Integer overflow CVE-2025-0725 |
CWE-190 | High | - | 05.02.2025 | - | ||
| #VU103600 - Covert Timing Channel CVE-2024-13176 |
CWE-385 | Medium | - | 04.02.2025 | - | ||
| #VU101654 - Exposure of sensitive information to an unauthorized actor CVE-2024-11053 |
CWE-200 | Low | 8.0.41, 8.4.4, 9.2.0 | 11.12.2024 |
SB2024121137 SB2024121189 SB2024121190 and 32 more |
||
| #VU95131 - Out-of-bounds read CVE-2024-7264 |
CWE-125 | Medium | - | 01.08.2024 | - | ||
| #VU93424 - Out-of-bounds read CVE-2024-5535 |
CWE-125 | Low | - | 27.06.2024 | - | ||
| #VU85927 - Improper Check for Certificate Revocation CVE-2024-0853 |
CWE-299 | Low | - | 31.01.2024 | - | ||
| #VU85170 - State Issues CVE-2023-6129 |
CWE-371 | Medium | - | 09.01.2024 | - | ||
| #VU64922 - Missing Encryption of Sensitive Data CVE-2022-2097 |
CWE-311 | Low | - | 05.07.2022 | - | ||
| #VU64684 - Incorrect Default Permissions CVE-2022-32207 |
CWE-276 | Low | - | 27.06.2022 | - | ||
| #VU21043 - Cryptographic Issues CVE-2019-1547 |
CWE-310 | Low | 3.12.5, 4.1.4 | 11.09.2019 |
SB2019091112 SB2019091202 SB2019092407 and 39 more |