← CVE Intelligence

CVE-2025-8107

OB / OceanBase Server PUBLISHED

Description (CNA)

In OceanBase's Oracle tenant mode, a malicious user with specific privileges can achieve privilege escalation to SYS-level access by executing carefully crafted commands. This vulnerability only affects OceanBase tenants in Oracle mode. Tenants in MySQL mode are unaffected.

Affected (CNA)

Vendor / productVersions
OB / OceanBase Serveraffected 3.2.4.x before 3.2.4.8; affected 4.2.1 x before 4.2.1.10; affected 4.2.x before 4.2.5; affected 4.3.3.x before 4.3.3.2; unaffected 4.3.4

CWE

CWE-668, CWE-269

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.