CVE-2025-30706: 
MySQL vulnerability analysis and mitigation

Vulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J) affecting versions 9.0.0-9.2.0. The vulnerability was discovered by JiAn Zhou, Ying Zhu, and Ziyang Li of Alibaba and was disclosed in Oracle's April 2025 Critical Patch Update (Oracle CPU, NVD).

This is a difficult to exploit vulnerability that allows low privileged attackers with network access via multiple protocols to compromise MySQL Connectors. The vulnerability has been assigned a CVSS v3.1 Base Score of 7.5 (HIGH) with the following vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H, indicating high impacts on confidentiality, integrity, and availability (NVD).

Successful exploitation of this vulnerability can result in complete takeover of MySQL Connectors, potentially compromising the confidentiality, integrity, and availability of the affected systems (NetApp Advisory).

The vulnerability requires network access and is considered difficult to exploit, requiring a low-privileged attacker to use multiple protocols. No public exploits have been confirmed at the time of disclosure (Oracle CPU).

Oracle has released patches as part of the April 2025 Critical Patch Update. Organizations using affected versions (9.0.0-9.2.0) of MySQL Connector/J should upgrade to the patched version. For specific environments like SnapCenter Server, MySQL software can be upgraded within documented constraints (NetApp Advisory).