OceanBase 3.2.4 < 3.2.4.8 / 4.2.1 < 4.2.1.10 / 4.2 < 4.2.5 / 4.3.3 < 4.3.3.2 Privilege Escalation (OBVD-2025-0205)

The version of OceanBase installed on the remote host is 3.2.4.x prior to 3.2.4.8, 4.2.1.x prior to 4.2.1.10, 4.2.x prior to 4.2.5, or 4.3.3.x prior to 4.3.3.2. It is, therefore, affected by a privilege escalation vulnerability as referenced in the OBVD-2025-0205 advisory. - In OceanBase's Oracle...

CVE-2025-8107

In OceanBase's Oracle tenant mode, a malicious user with specific privileges can achieve privilege escalation to SYS-level access by executing carefully crafted commands. This vulnerability only affects OceanBase tenants in Oracle mode. Tenants in MySQL mode are unaffected...

CVE-2025-8107: Exposure of Resource to Wrong Sphere

In OceanBase's Oracle tenant mode, a malicious user with specific privileges can achieve privilege escalation to SYS-level access by executing carefully crafted commands. This vulnerability only affects OceanBase tenants in Oracle mode. Tenants in MySQL mode are unaffected...

PT-2025-30639 · Oceanbase · Oceanbase

Name of the Vulnerable Software and Affected Versions: OceanBase affected versions not specified Description: A malicious user with specific privileges in OceanBase’s Oracle tenant mode can achieve privilege escalation to SYS-level access by executing carefully crafted commands. This issue only...