EUVD-2022-26510

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Vulnerability in MySQL Cluster allows high privileged attackers to compromise the system and take over.

Reporter	Title	Published	Views	Family All 219
ATTACKERKB	CVE-2022-21285	19 Jan 202212:15	–	attackerkb
CBLMariner	CVE-2022-21285 affecting package mysql 8.0.27-2	8 Feb 202203:14	–	cbl_mariner
CBLMariner	CVE-2022-21285 affecting package mysql for versions less than 8.0.28-1	9 Apr 202206:53	–	cbl_mariner
Chainguard	CVE-2022-21285 vulnerabilities	19 Jan 202212:15	–	cgr
CNNVD	Oracle MySQL 输入验证错误漏洞	19 Jan 202200:00	–	cnnvd
CNVD	Oracle MySQL Input Validation Error Vulnerability (CNVD-2022-09142)	3 Feb 202200:00	–	cnvd
CVE	CVE-2022-21285	19 Jan 202211:23	–	cve
Cvelist	CVE-2022-21285	19 Jan 202211:23	–	cvelist
Microsoft CVE	Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General). Supported versions that are affected are 7.4.34 and prior 7.5.24 and prior 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physical communication segment attached to the hardware where the MySQL Cluster executes to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of MySQL Cluster. CVSS 3.1 Base Score 6.3 (Confidentiality Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:H/I:H/A:H).	22 Jan 202208:00	–	mscve
NCSC	Vulnerabilities fixed in Oracle MySQL	19 Jan 202200:00	–	ncsc

[
  {
    "enisaIdVendor": [
      {
        "id": "65ddd7b2-e73a-3f4d-ad9f-d287ba241b4c",
        "vendor": {
          "name": "Oracle Corporation"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "0ea7cf30-e15e-3b89-809e-50c7a60f9563",
        "product": {
          "name": "MySQL Cluster"
        },
        "product_version": "7.4.34 and prior"
      },
      {
        "id": "61c11014-4d16-33d7-be59-2cb54ad2c842",
        "product": {
          "name": "MySQL Cluster"
        },
        "product_version": "8.0.27 and prior"
      },
      {
        "id": "67d7edbe-8c97-3839-8b2a-f3dfefc7b448",
        "product": {
          "name": "MySQL Cluster"
        },
        "product_version": "7.6.20 and prior"
      },
      {
        "id": "c431490d-e940-30ba-b820-cd89c0864fc9",
        "product": {
          "name": "MySQL Cluster"
        },
        "product_version": "7.5.24 and prior"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2022-21285.html
oracle	www.oracle.com/security-alerts/cpujan2022.html
security	www.security.netapp.com/advisory/ntap-20220121-0008/
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-22-089/

03 Oct 2025 20:07Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.16.3

CVSS 24

EPSS0.11434

SSVC