Oracle MySQL Cluster 8.4.x < 8.4.7 (October 2025 CPU)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(271393);
  script_version("1.2");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/02/24");

  script_cve_id(
    "CVE-2025-49794",
    "CVE-2025-49795",
    "CVE-2025-49796",
    "CVE-2025-5399",
    "CVE-2024-35195",
    "CVE-2024-12133"
  );
  script_xref(name:"IAVA", value:"2025-A-0793-S");

  script_name(english:"Oracle MySQL Cluster 8.4.x < 8.4.7 (October 2025 CPU)");

  script_set_attribute(attribute:"synopsis", value:
"The remote host is affected by multiple vulnerabilities");
  script_set_attribute(attribute:"description", value:
"The versions of MySQL Cluster installed on the remote host are affected by multiple vulnerabilities as referenced in the
October 2025 CPU advisory.

  - Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General (libxml2)). Easily
    exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise
    MySQL Cluster.  Successful attacks of this vulnerability can result in unauthorized creation, deletion or
    modification access to critical data or all MySQL Cluster accessible data and unauthorized ability to cause a hang
    or frequently repeatable crash (complete DOS) of MySQL Cluster. (CVE-2025-49796)

  - Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General (curl)). Easily exploitable
    vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Cluster.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable
    crash (complete DOS) of MySQL Cluster. (CVE-2025-5399)

  - Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: General (Requests)). Difficult to
    exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Cluster executes
    to compromise MySQL Cluster. Successful attacks require human interaction from a person other than the attacker.
    Successful attacks of this vulnerability can result in unauthorized creation, deletion or modification access to
    critical data or all MySQL Cluster accessible data as well as unauthorized access to critical data or complete access
    to all MySQL Cluster accessible data. (CVE-2024-35195)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://www.oracle.com/docs/tech/security-alerts/cpuoct2025csaf.json");
  script_set_attribute(attribute:"see_also", value:"https://www.oracle.com/security-alerts/cpuoct2025.html");
  script_set_attribute(attribute:"solution", value:
"Apply the appropriate patch according to the October 2025 Oracle Critical Patch Update advisory.");
  script_set_attribute(attribute:"agent", value:"all");
  script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:N/I:C/A:C");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-49796");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/10/20");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/10/20");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/10/24");

  script_set_attribute(attribute:"plugin_type", value:"remote");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:oracle:mysql_cluster");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Databases");

  script_copyright(english:"This script is Copyright (C) 2025-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("mysql_version.nasl", "mysql_login.nasl");
  script_require_ports("Services/mysql", 3306);

  exit(0);
}

include('mysql_version.inc');

mysql_check_version(variant:'Cluster', fixed:'8.4.7', min:'8.4', severity:SECURITY_HOLE);