CVE-2025-8107CWE-269CWE-668

In OceanBase's Oracle tenant mode, a malicious user with specific privileges can achieve privilege escalation to SYS-level access by executing carefully…

Medium · published July 24, 2025

CVSS v3.1
6.3
EPSS
0%
Percentile
28.0
In the wild
Unconfirmed
What it is

In OceanBase's Oracle tenant mode, a malicious user with specific privileges can achieve privilege escalation to SYS-level access by executing carefully crafted commands.

This vulnerability only affects OceanBase tenants in Oracle mode. Tenants in MySQL mode are unaffected.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00355 · 28.0th percentile
Weaknesses
CWE-269 · Improper Privilege Management; CWE-668 · Exposure of Resource to Wrong Sphere
Published
2025-07-24T07:12Z
EPSS history
Timeline
  • 24 JUL 07:12Z
    In OceanBase's Oracle tenant mode, a malicious user with specific privileges can achieve privilege escalation to SYS-level access by executing carefully…
    cvelistv5