CVE-2001-1275: Oracle MySQL

High severity, CVSS 7.2. EPSS: 0.5% chance of exploitation in the next 30 days.

MySQL before 3.23.31 allows users with a MySQL account to use the SHOW GRANTS command to obtain the encrypted administrator password from the mysql.user table and possibly gain privileges via password cracking.

Affected products

• Oracle MySQL: up to and including 3.23.31

Published 2001-01-19. Last modified 2026-06-16.