WID-SEC-W-2024-0894

WID-SEC-W-2024-0894 PUBLISHED CVSS 9.300000190734863 CRITICAL

Record from circl · Published April 16, 2024

MySQL ist ein Open Source Datenbankserver von Oracle.

Risk scores

CVSS 4.0

9.300000190734863

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Affected products

Vendor	Product	Versions
	Oracle Linux
	Oracle MySQL <=8.0.36
	Debian Linux
	MariaDB MariaDB 11.2.4
	IBM QRadar SIEM
	MariaDB MariaDB 10.5.25
	Oracle MySQL <=8.2.0
	MariaDB MariaDB 10.11.8
	MariaDB MariaDB <10.11.8
	MariaDB MariaDB <10.6.18
	MariaDB MariaDB <10.5.25
	MariaDB MariaDB <11.2.4
	MariaDB MariaDB 10.6.18
	Fedora Linux
	Amazon Linux 2
	Oracle MySQL <=8.0.34
	Oracle MySQL <=8.0.35

Timeline

Apr 16, 2024 CVE Published
Oct 27, 2025 CVE Updated
Oct 31, 2026 Distribution Patch (6 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln WID-SEC-W-2024-0894
vulnetix vdb fixes WID-SEC-W-2024-0894

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/WID-SEC-W-2024-0894/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

…and 10 more

Look up in the Resolve Platform →