Oracle MySQL Connector/j vulnerabilities

11 CVEs affecting Oracle MySQL Connector/j, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-61082, published 2026-07-21.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-2934, published 2020-04-15. Medium severity, CVSS 5.0. EPSS: 3.3% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.19 and prior and 5.1.48 and prior. Difficult to exploit…
CVE-2020-2875, published 2020-04-15. Medium severity, CVSS 4.7. EPSS: 2.2% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.0.14 and prior and 5.1.48 and prior. Difficult to exploit…
CVE-2012-1696, published 2012-05-03. Medium severity, CVSS 4.0. EPSS: 1.9% chance of exploitation in the next 30 days. Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.5.19 and earlier allows remote authenticated users to affect availability via unknown vectors related to Server Optimizer.
CVE-2020-2933, published 2020-04-15. Low severity, CVSS 2.2. EPSS: 1.5% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 5.1.48 and prior. Difficult to exploit vulnerability allows high…
CVE-2023-22102, published 2023-10-17. High severity, CVSS 8.3. EPSS: 0.9% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 8.1.0 and prior. Difficult to exploit vulnerability allows…
CVE-2025-30706, published 2025-04-15. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.0.0-9.2.0. Difficult to exploit vulnerability allows low privileged…
CVE-2019-2692, published 2019-04-23. Medium severity, CVSS 6.3. EPSS: 0.5% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors component of Oracle MySQL (subcomponent: Connector/J). Supported versions that are affected are 8.0.15 and prior. Difficult to exploit vulnerability allows high…
CVE-2026-60624, published 2026-07-21. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated…
CVE-2026-60586, published 2026-07-21. High severity, CVSS 7.7. EPSS: 0.4% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows low privileged…
CVE-2026-60623, published 2026-07-21. High severity, CVSS 7.1. EPSS: 0.3% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Difficult to exploit vulnerability allows low privileged…

Latest

CVE-2026-61082, published 2026-07-21. Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days. Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). Supported versions that are affected are 9.7.0-9.7.1. Easily exploitable vulnerability allows unauthenticated…