CVE-2024-21243
Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Telemetry). Supported versions that are affected are 8.4.2 and prior and 9.0.1 and prior. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized read access to a subset of MySQL Server accessible data. CVSS 3.1 Base Score 2.2 (Confidentiality impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N).
CVSS score
2.2
EPSS probability
%0.7
Risk score
0.0
Published
2 y ago
Vulnerability Timeline (Change History)
CVE-2024-21243 historical changes made to the vulnerability by NVD, CISA and MITRE:
| Date | Actor / Source | Action / Description | Type | Previous value | New value |
|---|---|---|---|---|---|
| 24.10.2026 | nvd@nist.gov | Initial Analysis & CVSS Vector Assignment | CVSS V3.1 | — | CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:L/I:N/A:N |
| 08.10.2024 | CISA Coordinator | SSVC Risk Re-assessment | SSVC / KEV | exploitation: none | exploitation: none |
| 08.10.2024 | MITRE / NVD | New CVE Record Received & Ingested | CVE Created | — | CVE-2024-21243 |
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2024-21243"