Skip to content
CVE PROGRAM SOURCE RECORD6.3 Medium

CVE-2025-8107

In OceanBase's Oracle tenant mode, a malicious user with specific privileges can achieve privilege escalation to SYS-level access by executing carefully crafted commands.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
OB

Description

In OceanBase's Oracle tenant mode, a malicious user with specific privileges can achieve privilege escalation to SYS-level access by executing carefully crafted commands. This vulnerability only affects OceanBase tenants in Oracle mode. Tenants in MySQL mode are unaffected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OB OceanBase Server

Default version status: unaffected

  • 3.2.4.x to < 3.2.4.8affected
  • 4.2.1 x to < 4.2.1.10affected
  • 4.2.x to < 4.2.5affected
  • 4.3.3.x to < 4.3.3.2affected
  • 4.3.4unaffected

References