Oracle Critical Patch Update — April 2025
Tuesday, 15 April 2025
Exploited 0
Confirmed exploited (CISA KEV, ENISA). "Zero-day" means exploitation was known by the patch day — install these first.
None of this release's vulnerabilities is known to be exploited so far.
Critical 1
- Critical 9.8
Public exploit code 2
Not critical and not yet seen exploited, but exploit or proof-of-concept code is public.
- High 8.1
-
Medium 6.5
CVE-2025-21574 Public exploit Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9…EPSS 1.1%
All vulnerabilities 73
Critical1 ShowHide
- Critical 9.8
High14 ShowHide
- High 8.1
- High 8.1
- High 7.6
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.5
- High 7.4
- High 7.4
- High 7.3
- High 7.2
Medium54 ShowHide
- Medium 6.7
- Medium 6.7
-
Medium 6.5
CVE-2025-21574 Public exploit Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Parser). Supported versions that are affected are 8.0.0-8.0.41, 8.4.0-8.4.4 and 9…EPSS 1.1%
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.5
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.1
- Medium 6.0
- Medium 5.7
- Medium 5.6
- Medium 5.5
- Medium 5.5
- Medium 5.5
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.4
- Medium 5.3
- Medium 5.3
- Medium 5.3
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.9
- Medium 4.8
- Medium 4.8
- Medium 4.4
- Medium 4.0
Low4 ShowHide
- Low 3.6
- Low 3.5
- Low 2.7
- Low 2.7