Executive Summary

CVE-2024-21262 exposes a vulnerability in Oracle MySQL Connector/ODBC (v9.0.0 and earlier). An unauthenticated attacker with network access can exploit the flaw via multiple protocols to modify, delete, or insert data in MySQL Connectors and trigger a partial denial of service. The CVSS 3.1 score is 6.5, reflecting moderate integrity and availability impact. No current CISA KEV listing.

---

Authoritative CVE Metadata - CVSS Base Score: 6.5 (MEDIUM) - Published: 2024-10-15T20:15:17.157 - Last Modified: 2026-09-18T20:51:50.480

Original Description: Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/ODBC). Supported versions that are affected are 9.0.0 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network access via multiple protocols to compromise MySQL Connectors. Successful attacks of this vulnerability can result in unauthorized update, insert or delete access to some of MySQL Connectors accessible data and unauthorized ability to cause a partial denial of service (partial DOS) of MySQL Connectors. CVSS 3.1 Base Score 6.5 (Integrity and Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L).

"Yesterdays home runs don't win today's games."

— Babe Ruth