CVE-2025-30710: 
MySQL vulnerability analysis and mitigation

Vulnerability in the MySQL Cluster product of Oracle MySQL (component: Cluster: NDBCluster Plugin) affects versions 8.0.0-8.0.41, 8.4.0-8.4.4, and 9.0.0-9.2.0. This vulnerability allows high privileged attackers with network access via multiple protocols to compromise MySQL Cluster (Oracle Advisory, NVD).

The vulnerability has been assigned a CVSS 3.1 Base Score of 4.9 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H. The vulnerability requires high privileges for exploitation but has a low attack complexity and can be accessed through network vectors (Oracle Advisory).

Successful exploitation of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Cluster. The impact is primarily focused on availability, with no direct impact on confidentiality or integrity (Oracle Advisory).

Oracle has released patches to address this vulnerability as part of the April 2025 Critical Patch Update. Users are strongly advised to apply these security patches as soon as possible. The patches are available for affected versions through the Oracle support portal (Oracle Advisory).