2025 CVE Vulnerabilities
45,207 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-30696 | MEDIUM | 4.9 | 0.7% | Apr 15, 2025 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: PS). Supported versions that are affected... |
| CVE-2025-30695 | MEDIUM | 5.5 | 0.6% | Apr 15, 2025 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are... |
| CVE-2025-30694 | MEDIUM | 5.4 | 0.3% | Apr 15, 2025 | Vulnerability in the XML Database component of Oracle Database Server. Supported versions that are affected are 19.3-19... |
| CVE-2025-30693 | MEDIUM | 5.5 | 0.8% | Apr 15, 2025 | Vulnerability in the MySQL Server product of Oracle MySQL (component: InnoDB). Supported versions that are affected are... |
| CVE-2025-30692 | MEDIUM | 6.5 | 0.5% | Apr 15, 2025 | Vulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Attachments). Supported ver... |
| CVE-2025-30691 | MEDIUM | 4.8 | 0.5% | Apr 15, 2025 | Vulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are Oracle Java SE: 21.0.6,... |
| CVE-2025-30689 | MEDIUM | 4.9 | 0.7% | Apr 15, 2025 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a... |
| CVE-2025-30688 | MEDIUM | 6.5 | 0.7% | Apr 15, 2025 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a... |
| CVE-2025-30687 | MEDIUM | 6.5 | 0.7% | Apr 15, 2025 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a... |
| CVE-2025-30685 | MEDIUM | 4.9 | 0.7% | Apr 15, 2025 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are... |
| CVE-2025-30684 | MEDIUM | 4.9 | 0.7% | Apr 15, 2025 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are... |
| CVE-2025-30683 | MEDIUM | 4.9 | 0.7% | Apr 15, 2025 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Replication). Supported versions that are... |
| CVE-2025-30682 | MEDIUM | 6.5 | 0.7% | Apr 15, 2025 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a... |
| CVE-2025-30514 | MEDIUM | 6.9 | 0.4% | Apr 15, 2025 | Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "scenes"). |
| CVE-2025-30511 | MEDIUM | 5.4 | 0.3% | Apr 15, 2025 | An authenticated attacker can achieve stored XSS by exploiting improper sanitization of the plant name value while addin... |
| CVE-2025-30254 | MEDIUM | 6.9 | 0.4% | Apr 15, 2025 | An unauthenticated attacker can obtain a serial number of a smart meter(s) using its owner's username. |
| CVE-2025-27938 | MEDIUM | 6.9 | 0.4% | Apr 15, 2025 | Unauthenticated attackers can obtain restricted information about a user's smart device collections (i.e., "rooms"). |
| CVE-2025-27568 | MEDIUM | 6.9 | 0.4% | Apr 15, 2025 | An unauthenticated attacker can get users' emails by knowing usernames. A password reset email will be sent in response ... |
| CVE-2025-24487 | MEDIUM | 6.9 | 0.4% | Apr 15, 2025 | An unauthenticated attacker can infer the existence of usernames in the system by querying an API. |
| CVE-2025-21588 | MEDIUM | 4.9 | 0.7% | Apr 15, 2025 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DML). Supported versions that are affecte... |
| CVE-2025-21586 | MEDIUM | 5.4 | 0.3% | Apr 15, 2025 | Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web Runtime SEC). Supporte... |
| CVE-2025-21585 | MEDIUM | 4.9 | 0.7% | Apr 15, 2025 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Optimizer). Supported versions that are a... |
| CVE-2025-21584 | MEDIUM | 4.9 | 0.7% | Apr 15, 2025 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte... |
| CVE-2025-21583 | MEDIUM | 4.9 | 0.7% | Apr 15, 2025 | Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: DDL). Supported versions that are affecte... |
| CVE-2025-21582 | MEDIUM | 6.1 | 0.3% | Apr 15, 2025 | Vulnerability in the Oracle CRM Technical Foundation product of Oracle E-Business Suite (component: Preferences). Suppo... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now